Microsoft Ditches SMS and Voice Authentication for Entra ID Users
Microsoft is phasing out SMS and voice authentication for its Entra ID platform in favor of more secure methods. The company has set a strict timetable for corporate users, with September 1st being the deadline to register a passkey during sign-in, and February 1st, 2027, marking the permanent termination of SMS and voice verification across all Entra ID accounts.
Microsoft cites the need for stronger, phishing-resistant authentication in the face of increasing cyber threats. The company notes that AI-assisted social engineering has made it easier for attackers to create convincing campaigns designed to steal credentials and one-time codes.
The shift towards passkeys will introduce operational friction for organizations, particularly those with non-technical staff or older hardware. Companies are advised to audit their recovery options and establish passkeys before Microsoft pulls the safety cord entirely.