--- title: Microsoft is making passkeys the default for Entra ID,... description: Microsoft is making passkeys the default authentication method in Entra ID starting September 1, 2026. Users on SMS or voice MFA will be auto-enrolled and... canonical: https://daily.dev/posts/microsoft-is-making-passkeys-the-default-for-entra-id-with-sms-auth-ending-in-2027-fmzxnxctr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Microsoft is making passkeys the default for Entra ID, with SMS auth ending in 2027 | daily.dev og:description: Microsoft is making passkeys the default authentication method in Entra ID starting September 1, 2026. Users on SMS or voice MFA will be auto-enrolled and... og:url: https://daily.dev/posts/microsoft-is-making-passkeys-the-default-for-entra-id-with-sms-auth-ending-in-2027-fmzxnxctr og:image: https://api.daily.dev/og/posts/fmZXnXctR.png og:image:alt: Microsoft is making passkeys the default for Entra ID, with SMS auth ending in 2027 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Microsoft is making passkeys the default for Entra ID, with SMS auth ending in 2027 **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary Microsoft is making passkeys the default authentication method in Entra ID starting September 1, 2026. Users on SMS or voice MFA will be auto-enrolled and prompted to register a passkey at their next sign-in. Microsoft-provided SMS and voice authentication will be fully retired on February 1, 2027, with no opt-out. The change is driven by AI-powered phishing attacks targeting phone-based MFA as a weak link. Organizations needing phone-based auth after the deadline must configure third-party telecom providers via the Microsoft Security Store. Enterprises are advised to audit current auth policies, begin FIDO2/passkey enrollment, and set up recovery procedures before the deadline. ## Content Microsoft is switching passkeys to the default authentication method in Entra ID starting September 1, 2026. Users currently relying on SMS or voice authentication will be automatically enrolled and prompted to register a passkey during their next MFA event. Microsoft-provided SMS and voice authentication will be fully retired on February 1, 2027. Organizations that still need phone-based authentication after that date will have to configure third-party telecom providers through the Microsoft Security Store. There's no opt-out once the deadline passes. The push is largely a response to AI-powered phishing and credential theft. Groups like ShinyHunters have been running increasingly effective campaigns against Entra SSO accounts, and traditional MFA methods — SMS codes in particular — are vulnerable to interception and real-time phishing. Passkeys remove shared secrets from the authentication flow entirely, which makes those attacks significantly less effective. ## What enterprises should do before the deadlines - Audit current authentication policies to identify users still on SMS or voice - Enroll users in FIDO2/passkey-compatible methods before September - Set up recovery procedures for users who lose access to their passkey device - If SMS/voice is genuinely required, evaluate third-party telecom provider options now The timeline gives organizations several months to prepare, but the auto-enrollment nudges starting in September mean users will start seeing prompts whether IT is ready or not. Getting ahead of that is worth the effort. --- *This was also part of the July 10, 2026 Azure update, which included Azure Front Door edge actions (preview), Azure Databricks SQL Serverless expanding to UK West, Arc-enabled SQL migration to Azure VMs, MSSQL VS Code extension improvements, and advanced platform metrics in Azure Monitor.* ## Similar posts on daily.dev - [Microsoft to roll out Entra passkeys on Windows in late April](https://daily.dev/posts/microsoft-to-roll-out-entra-passkeys-on-windows-in-late-april-dcryfhs6k) · BleepingComputer · 0 upvotes · 0 comments - [Microsoft is scrapping SMS 2-factor authentication because it's "a leading source of fraud"](https://daily.dev/posts/microsoft-is-scrapping-sms-2-factor-authentication-because-it-s-a-leading-source-of-fraud--o0ddh501l) · XDA Developers · 7 upvotes · 10 comments --- Tags: [#authentication](https://daily.dev/tags/authentication), [#passkeys](https://daily.dev/tags/passkeys) [View this post on daily.dev](https://daily.dev/posts/microsoft-is-making-passkeys-the-default-for-entra-id-with-sms-auth-ending-in-2027-fmzxnxctr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Microsoft is making passkeys the default for Entra ID, with SMS auth ending in 2027","url":"https://daily.dev/posts/microsoft-is-making-passkeys-the-default-for-entra-id-with-sms-auth-ending-in-2027-fmzxnxctr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/microsoft-is-making-passkeys-the-default-for-entra-id-with-sms-auth-ending-in-2027-fmzxnxctr"},"datePublished":"2026-07-15T04:18:27.934Z","dateModified":"2026-07-17T13:27:41.627Z","description":"Microsoft is making passkeys the default authentication method in Entra ID starting September 1, 2026. Users on SMS or voice MFA will be auto-enrolled and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/856d8e7b60987be30a47a3a5fdb5df17?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/856d8e7b60987be30a47a3a5fdb5df17?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/microsoft-is-making-passkeys-the-default-for-entra-id-with-sms-auth-ending-in-2027-fmzxnxctr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"authentication,passkeys","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Microsoft is making passkeys the default for Entra ID, with SMS auth ending in 2027"}]} ```