Microsoft Ditches SMS-Based MFA, Shifts to Passkey-Based System

Microsoft is ending support for SMS and voice-based multi-factor authentication (MFA) starting September 1, 2026. This change affects Microsoft Authenticator users worldwide, including personal and work accounts. To ensure a smooth transition, the company has provided a step-by-step guide to migrate to the new passkey-based MFA system.

The Entra ID authentication method now automatically enrolls users in passkey registration prompts. Native SMS and voice delivery will be retired by February 1, 2027. Microsoft has also introduced jailbreak and root detection into the Authenticator app, blocking tampered devices from holding Entra credentials.

For a successful migration, it's essential to follow the provided prerequisites, including updating the Microsoft Authenticator version, accessing old phones, setting up cloud backups, and enabling iCloud (for iOS users). The guide also addresses common pitfalls and provides troubleshooting tips for IT administrators managing work accounts.