Microsoft will make passkeys the default authentication method in Entra ID starting September 1, 2026. SMS and voice authentication will be discontinued as a Microsoft service, and organizations must switch to passkeys or choose external telecom providers.
Microsoft is changing its authentication policy within Entra ID to better protect against identity attacks. Starting September 2026, passkeys will become the default method for users currently using SMS or voice verification. For companies that rely on SMS or voice authentication, Microsoft still offers an alternative, but the focus is clearly shifting toward phishing-resistant solutions.
Passkeys as the standard
Starting September 1, 2026, Microsoft will begin rolling out passkeys as the default authentication experience in Entra ID. Users currently using SMS or voice for verification will automatically be given the option to activate passkeys. During their next multi-factor authentication, they will be prompted to register a passkey.
Organizations have until February 2027 to transition their users. After that, Microsoft will permanently stop offering its own telecom services for SMS and voice. This means that SMS and voice authentication will no longer be a native functionality within Entra ID.
External telecom providers
For organizations that still wish to use SMS or voice, Microsoft offers a solution via the Microsoft Security Store. Starting September 2026, companies can turn to external telecom partners for SMS and voice verification.
All costs for these services will be borne by the customer, who will pay the chosen provider directly. Organizations are advised to start identifying which users are still dependent on SMS or voice and to plan their transition to passkeys now.