Back Feeds.4Sysops

Microsoft Entra ID to enforce passkeys and retire legacy MFA by 2027

Feeds.4Sysops •IT News • July 14, 2026

Microsoft Entra ID will begin a major transition on September 1, 2026, by making passkeys the default authentication method for all public cloud tenants. Users currently relying on SMS or voice-based multifactor authentication will be automatically enabled for passkeys and prompted to register one during their sign-in challenge. This shift aims to replace phishable credentials with public-key cryptography, which uses local device biometrics or PINs to ensure authentication data never leaves the user's hardware. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Transitions to Passkeys, Phasing Out SMS and Voice Authentication by 2027 Microsoft has announced that starting September 1, 2026, passkeys will become the default authentication method for Entra ID, replacing SMS and voice-based multifactor authentication. This change is aimed at enhancing security against phishing attacks, particularly as AI-assisted phishing campaigns have seen click-through rates as high as 54%. Users currently relying on SMS or voice authentication will be automatically transitioned to passkeys, which utilize public-key cryptography and are considered more secure. Microsoft will retire its native SMS and voice authentication services on February 1, 2027, requiring organizations to use third-party providers if they still need these methods. The company is encouraging organizations to prepare for this transition by identifying users who depend on SMS or voice authentication and developing plans to migrate them to passkeys. This move is part of a broader industry trend towards passwordless authentication to mitigate credential theft risks. 28 sources 61

Extracted Entities

Platforms (1)

Microsoft Entra ID