🔐 Microsoft Entra is making passkeys the default authentication method—and retiring Microsoft-provided SMS and voice authentication.

This marks another major step toward phishing-resistant, passwordless authentication across Microsoft Entra.

The transition begins on September 1, 2026, with passkeys becoming the preferred sign-in experience. Organizations that continue to rely on SMS or voice authentication should start planning now to ensure a smooth transition.

📅 Key rollout milestones

September 1, 2026

  • Rollout begins and will be deployed gradually across eligible tenants.
  • Users currently enabled for Microsoft SMS or voice authentication will automatically be enabled for passkeys.
  • Microsoft will configure the Registration Campaign to encourage passkey enrollment.
  • During MFA sign-in, users will be prompted to register a passkey, although they can initially choose to skip.

September 18, 2026

  • Organizations can begin evaluating telecom authentication providers available through the Microsoft Security Store to determine which provider best meets their business, regional, and compliance requirements.

October 30, 2026

  • Customers that need to continue using SMS or voice authentication can select a supported telecom provider from the Microsoft Security Store.

February 1, 2027

  • Microsoft-provided SMS and voice authentication will be retired.
  • Only customer-configured telecom providers will support SMS and voice authentication.
  • Passkeys become Microsoft’s recommended and default authentication method.
  • Organizations that continue relying solely on Microsoft-provided SMS or voice authentication without taking action may experience sign-in disruptions after this date.

Why this matters

Passkeys provide a phishing-resistant, passwordless authentication experience that is both more secure and more convenient than traditional authentication methods.

Even better, passkeys are included with all Microsoft Entra plans, so organizations can improve their identity security posture without additional licensing costs.

If your organization hasn’t started planning its migration to passkeys, now is the time to assess your authentication strategy, educate users, and prepare for the upcoming retirement of Microsoft-provided SMS and voice authentication.

📖 Learn more: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement