Skip to content
NewA calmer, faster ZeroHour

Microsoft urges Entra ID admins to replace SMS and voice with passkeys

Original title: Microsoft Urges Entra ID Admins to Migrate from SMS and Voice Authentication to Passkeys

Cyber Security Newsby Abinaya ()2 min read1
Part of a story covered by 3 sourcesMicrosoft to retire Entra ID SMS and voice MFA from February 2027Merged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Retirement of Microsoft-provided phone authentication starts February 1, 2027, in Worldwide and Government Community Cloud tenants.

Microsoft told Entra ID administrators, in Message Center notice MC1528000 on October 27, to move off Microsoft-provided SMS and voice authentication before retirement begins on February 1, 2027. Users who already have another sign-in method can keep using it. Users whose only method is SMS or voice may use it once more, then must register a passkey. The change does not ban all phone authentication; organizations can use a customer-managed telecom provider.

Key facts
  • Retirement should finish in early February 2027.
  • Customer-managed provider configuration is due to be available from October 30, 2026.
  • Existing customer-managed providers are unaffected.
  • Tenants that do not use Microsoft-provided SMS or voice need no action.
  • Passkeys use FIDO public-key cryptography and are bound to the site or app.
Security assessment · AI, from the article

Impact: Phishable codes or SIM-swapped numbers used for sign-in

ProductAffected
Microsoft Entra ID SMS and voice authentication—
What to do
  1. 1.Identify users who rely only on SMS or voice and register passkeys.
  2. 2.Notify employees and helpdesk teams before February 1, 2027.
  3. 3.Optionally configure a customer-managed telecom provider from October 30, 2026.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at cybersecuritynews.com

Microsoft urged Entra ID administrators to migrate from SMS and voice authentication in Entra ID to passkeys before retirement begins on February 1, 2027, to reduce phishing risks and prevent sign-in disruptions. The reminder, published on October 27 under Message Center notice MC1528000, follows July announcements. Retirement covers Worldwide and Government Community Cloud environments and […]

Cyber Security News

By Abinaya · cybersecuritynews.com

Read the full article at Cyber Security News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.