Microsoft to default to Passkeys authentication and removes SMS and voice from Entra ID

Microsoft just announced that by February 1, 2027 (about six months from now), Entra ID authentication (ex-Azure Active Directory, AAD) will no longer support Microsoft-provided SMS and voice authentication methods.

At the same time, Passkeys authentication will become the default, and Microsoft will start pushing users towards Passkeys later this year, starting in September.

Here's what the company says:

"As identity attacks grow more sophisticated in the AI era, organizations need stronger authentication methods that protect users from phishing, credential theft, and social engineering. To address these evolving threats, Microsoft Entra ID is updating its authentication experience by making passkeys the default phishing-resistant authentication method, helping customers reduce reliance on phishable methods such as SMS and voice."

So, if you don't have Passkeys enabled yet, it's a good idea to start preparing.