Microsoft warns you to stop using SMS-based passwords because of AI phishing, and it'll block you starting with Entra ID

Microsoft warns you to stop using SMS-based passwords because of AI phishing, and it'll block you starting with Entra ID

In an email, Microsoft just warned IT admins against using SMS- or voice-based authentication and urged them to switch to passkeys due to rising AI-assisted phishing and other security threats. Microsoft confirmed that it’ll begin blocking these authentication methods for Entra users on February 1, 2027, and regular users with a personal Microsoft account will also see similar changes. “We are notifying all Microsoft Entra ID tenants of an impor…

Microsoft Entra: Passkey Migration 2027

Microsoft Entra: SMS MFA ends twenty twenty seven—migrate to passkeys with Entra Verified ID, Face Check and recovery Retirement timeline: Microsoft makes passkeys the default on September 1, 2026, and fully retires Microsoft-managed SMS and voice MFA on February 1, 2027.Users who only have SMS or voice will be blocked at sign-in and forced to register a passkey with no opt-out, so organisations should act well before the deadline. Customer-man…