Microsoft Entra ID Adopts Passkeys as Default and Phases Out SMS/Voice Codes

Microsoft Entra ID is set to transition to Passkeys as its default authentication method beginning in September. Users who have previously enabled SMS or voice verification codes for multi-factor authentication (MFA) will be prompted to register a Passkey during their next MFA interaction.

This strategic shift aims to enhance security by moving away from less secure, potentially phishable verification methods. The change is currently slated for Microsoft Entra ID within public cloud environments.

Microsoft has announced plans to cease offering SMS and voice verification code services entirely by February 1, 2027. Users who continue to utilize these methods will be required to migrate to Passkey or make separate arrangements for paid SMS/voice verification services through third-party telecommunications providers before the deadline.

The company stated that further announcements regarding support plans and migration guidance for other cloud environments will be released at a later date. This move signifies a broader industry trend towards passwordless authentication solutions.