Microsoft has announced that starting September 1, 2026, Entra ID will transition to using passkeys as its default authentication method. This change aims to enhance security and streamline the user experience.
As part of this transition, the company will phase out SMS and voice multi-factor authentication (MFA) by February 1, 2027. Users currently relying on these methods will need to migrate to passkeys before the deadline.
This move reflects a broader trend in the tech industry towards more secure and user-friendly authentication methods, reducing reliance on SMS, which has been criticized for its vulnerabilities.
Updates
Update at 17:52 UTC on 2026-07-26
4sysops For SysAdmins and DevOps reported Microsoft Entra administrators now have a fixed migration clock: passkeys become the default authentication method on September 1, 2026, while Microsoft-provided SMS and voice authentication are retired on February 1, 2027. Users relying on.
Sources: 4sysops For SysAdmins and DevOps