Reported by 3 outlets

Timeline

1. original reporting

   Microsoft Entra ID: Passkeys Become Default Authentication, SMS/Voice Retired February 2027

   microsoft.com · 92d ago · July 14th, 2026

   Microsoft announced that beginning September 1, 2026, Entra ID will make passkeys the default authentication method, auto-enabling users currently on SMS or voice MFA. On February 1, 2027, Microsoft-provided SMS and voice authentication will be retired entirely. Organizations requiring SMS or voice must select a third-party telecom provider through the Microsoft Security Store.

   Microsoft cited AI-powered phishing campaigns reaching 54% click-through rates (vs. 12% for traditional campaigns) as the driver for the transition. The company recommended organizations begin planning passkey rollout immediately, identify users still on phishable methods, and prepare user communications.

   ---

2. update from cyberpress.org

   Microsoft Entra ID to Retire SMS and Voice MFA as Passkeys Become Default

   cyberpress.org · 59d ago · August 15th, 2026

   Microsoft will make passkeys the default authentication experience in Entra ID beginning September 1, 2026, while retiring its native SMS and voice multifactor authentication delivery on February 1, 2027. According to Microsoft, the move reflects a broader push to eliminate phishable credentials as enterprises scale cloud and AI adoption. Under the new policy, Entra tenants with users enabled for SMS or voice authentication will have those users automatically enabled for passkeys in the Authentication Methods Policy . Microsoft Entra ID to Retire SMS and Voice MFA During a subsequent sign-in that requires MFA, eligible users will be prompted to register a passkey. Microsoft will set the Registration Campaign to the Microsoft Managed state and automatically target affected users. The company describes passkeys as phishing-resistant credentials based on cryptographic key pairs rather than shared secrets such as passwords or one-time SMS codes. They are designed to resist common account-takeover techniques, including credential phishing , SIM-swapping, and replay attacks. Entra ID supports both synced and device-bound passkeys. Synced passkeys are stored in credential managers such as iCloud Keychain or Google Password Manager and can sync across users’ devices. Device-bound passkeys remain tied to a specific platform or authenticator, including Windows Hello for Business, Microsoft Authenticator, Entra Passkey on Windows, and FIDO2 hardware security keys.

3. update from gbhackers.com

   Microsoft Makes Passkeys Default in Entra ID, Retires SMS and Voice Authentication

   gbhackers.com · 59d ago · August 15th, 2026

   According to Microsoft, the transition is part of Microsoft’s broader effort to eliminate phishable credentials as enterprises expand cloud usage, remote access, […] The post Microsoft Makes Passkeys Default in Entra ID, Retires SMS and Voice Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .