Microsoft to Make Passkeys Default in Entra ID and Retires SMS and Voice Authentication
Brief
Microsoft will make passkeys the default authentication experience in Microsoft Entra ID as part of a broader move away from phishing-prone sign-in methods.
The company will also retire Microsoft-provided SMS and voice authentication for multifactor authentication, pushing organizations toward phishing-resistant credentials.
Beginning September 1, 2026, users currently enabled for SMS or voice authentication will be automatically enabled for passkeys. During a future MFA sign-in, these users will see prompts encouraging them to register a passkey.
Microsoft will manage the passkey registration campaign by default. However, users can repeatedly postpone the registration prompt during the transition period. The change is designed to reduce risks associated with SMS and voice-based authentication.