Microsoft tells Entra ID admins to leave SMS and voice before 2027
Microsoft-provided SMS and voice MFA end February 1, 2027 for workforce tenants, not Azure AD B2C or Entra External ID.
Stories per day · 30 days
2 RSS
10 stories, newest first · one card per story
Stories tagged #fido2
12 Best Passwordless Authentication Solutions Compared (2026): Features & Pricing
A 2026 roundup names Microsoft the best workforce passwordless start and HYPR the dedicated platform.
3
The MFA you have isn’t the MFA you think you have
Opinion piece argues push and SMS/OTP MFA remain phishable via fatigue attacks, SIM swaps, and real-time proxy kits, urging phased FIDO2/passkey migration.
Top 10 Best Passwordless Authentication Solutions in 2026 [Ranked & Scored]
A 2026 ranking names Microsoft the top passwordless authentication option, ahead of Okta FastPass and Yubico.
3
Microsoft reminds admins to migrate Entra ID users to passkeys
Microsoft reminds admins to migrate Entra ID users to passkeys before SMS first-factor sign-in is retired in February 2027.
3
I don't like passkeys
A security blogger argues passkeys suit enterprises but expose individuals to lockout, ban, and recovery risks that outweigh their phishing protection.
2
UK Government Begins Moving 23 Million Users Away From Passwords
UK government rolls out passkeys for GOV.UK One Login, giving 23 million users phishing-resistant passwordless access to public services.
2
ChatGPT advanced account security adds passkeys and hardware keys
OpenAI launches Advanced Account Security for ChatGPT and Codex, replacing passwords with passkeys or hardware keys and disabling email/SMS recovery.
10
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing
Three research teams showed passkey bypasses: WebAuthn assertion replay in Microsoft Entra ID, synced-passkey key recovery in Google Password Manager, and Windows Hello key reuse.
4
New Pass-ta-key attack reveals all the things we didn't know about passkeys
Ars Technica explains why the new Pass-ta-key attack on passkeys is largely a non-issue, revealing OS differences in passkey apps.