diff --git a/CHANGELOG.md b/CHANGELOG.md
index cf25149f..8f45ba7a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Removed
+- IWA from default authentcation modes.
 ### Changed
 - Temporarily paused the publishing of Linux binaries.
 - Upgrade MSAL from `4.59.1` to `4.65.0`.
diff --git a/src/AzureAuth/Commands/CommandAad.cs b/src/AzureAuth/Commands/CommandAad.cs
index 8653c949..48130f48 100644
--- a/src/AzureAuth/Commands/CommandAad.cs
+++ b/src/AzureAuth/Commands/CommandAad.cs
@@ -61,7 +61,7 @@ public class CommandAad
         /// </summary>
 #if PlatformWindows
         public const string AuthModeHelperText = @"Authentication mode. Repeated invocations allowed.
-[default: iwa (Integrated Windows Auth), then broker, then web]
+[default: broker, then web]
 [possible values: all, iwa, broker, web, devicecode]";
 #else
         public const string AuthModeHelperText = @"Authentication mode. Repeated invocations allowed. [default: web]
diff --git a/src/MSALWrapper/AuthMode.cs b/src/MSALWrapper/AuthMode.cs
index 00140481..546be983 100644
--- a/src/MSALWrapper/AuthMode.cs
+++ b/src/MSALWrapper/AuthMode.cs
@@ -47,7 +47,7 @@ public enum AuthMode : short
         /// <summary>
         /// Default auth mode.
         /// </summary>
-        Default = IWA | Broker | Web,
+        Default = Broker | Web,
 #else
         /// <summary>
         /// All auth modes.