Microsoft is rolling out passkey support across Apple, Windows, and Google platforms and is making passkeys the default sign-in experience in Microsoft Entra ID. This shift gives organizations phishing-resistant authentication by default and strengthens account security. As part of this transition, Microsoft is retiring Microsoft-provided SMS and voice authentication in Entra ID because these methods no longer meet modern security standards. Beginning September 1, 2026, users currently enabled for SMS or voice authentication will be automatically enabled for passkeys and prompted to register one during sign-in. Microsoft-provided SMS and voice authentication will be fully retired on February 1, 2027.
This guide explains how to enable and configure passkeys in Microsoft Entra ID, then register passkeys using Microsoft Authenticator or iCloud Keychain.
