Microsoft is reminding Entra ID admins to move users to phishing-resistant sign-in methods before SMS and voice authentication are retired in February 2027.
Details
This applies to Entra ID workforce tenants, not Azure AD B2C or Entra External ID. Users still on SMS or voice codes risk sign-in disruptions when the retirement hits, so Microsoft is pushing passkeys.
My take
About time. SIM swaps and phished codes have beaten SMS MFA for years. If you manage a tenant, find out who’s still on SMS and get passkeys rolled out before the deadline. Do the same on your personal accounts.
God Bless, and Happy hacking!
