Microsoft Mandates Passkeys by Default in Entra ID, Begins Phasing Out SMS Authentication

PUBLISHED Aug 31, 2026, 7:53 PM ET

Microsoft Corporation has officially mandated passkeys as the default authentication experience across Microsoft Entra ID starting September first two thousand twenty-six. The major security transition automatically prompts users reliant on traditional text message or voice verification for multi-factor authentication to adopt phishing-resistant credentials today. Microsoft confirmed that native telecommunications delivery for short message service and voice verification will be completely retired by February first two thousand twenty-seven. Organizations requiring telephony-based authentication due to specific regulatory or operational requirements must configure independent telecom providers through the Microsoft Security Store following upcoming commercial releases. The policy shift aims to combat rising identity threats and sophisticated artificial intelligence driven credential theft targeting corporate cloud networks globally. Tenants retain administrative options for temporary deferrals during the migration window, but complete transition to phishing-resistant public-key cryptography remains mandatory for long-term platform compliance across enterprise digital environments worldwide right now for enhanced cloud account security standards.

By James Porter | JQJO News

Media Bias

Articles Published:: 31
Right Leaning:: 0
Left Leaning:: 0
Neutral:: 31

Explain Framing

Left: Focuses on corporate consumer data protection and regulatory compliance standards. Center: Emphasizes technical platform updates security improvements and timeline milestones factually. Right: Highlights market efficiency enterprise risk reduction and cybersecurity innovation economics.