diff --git a/api/interface.go b/api/interface.go
index cdfa6d6..7e71371 100644
--- a/api/interface.go
+++ b/api/interface.go
@@ -64,6 +64,7 @@ type AuthService interface {
 	Authorize(ctx context.Context, request *AuthorizationRequest) (*AuthorizationResponse, error)
 }
 
+// Deprecated: Prefer Passthrough Auth https://docs.solo.io/gloo-edge/latest/guides/security/auth/extauth/passthrough_auth/
 // External authorization plugins must implement this interface
 type ExtAuthPlugin interface {
 	// Gloo will deserialize the external authorization plugin configuration defined on your AuthConfig into the
diff --git a/changelog/v0.2.3/deprecate-ExtAuthPlugin-interface.yaml b/changelog/v0.2.3/deprecate-ExtAuthPlugin-interface.yaml
new file mode 100644
index 0000000..bb7f028
--- /dev/null
+++ b/changelog/v0.2.3/deprecate-ExtAuthPlugin-interface.yaml
@@ -0,0 +1,5 @@
+changelog:
+- type: FIX
+  description: Mark ExtAuthPlugin interface as deprecated as we encourage users to use the safer alternative, [Passthrough Auth](https://docs.solo.io/gloo-edge/latest/guides/security/auth/extauth/passthrough_auth/).
+  issueLink: https://github.com/solo-io/solo-projects/issues/6961
+  resolvesIssue: false