07/22/2026
🚨 Important Microsoft 365 Security Update: SMS & Voice MFA Are Being Retired 🚨
Microsoft has announced a major change to Microsoft Entra ID (formerly Azure AD) authentication. As cyber threats become more sophisticated—especially with the rise of AI-powered phishing attacks—Microsoft is moving organizations toward phishing-resistant authentication methods like Passkeys.
📅 Key Dates to Know
✅ September 1, 2026
Users currently using SMS or voice authentication will automatically be enabled for Passkeys.
Microsoft will begin prompting users to register a Passkey during MFA sign-ins.
✅ February 1, 2027
Microsoft-provided SMS and voice authentication will be retired in Microsoft Entra ID.
Organizations that still require SMS or voice authentication will need to utilize a customer-managed telecom provider through Microsoft's approved options.
✅ After February 1, 2027
Users whose only MFA option is SMS or voice will be required to register a Passkey before they can continue signing in. This enforcement applies to all tenants.
🔒 Why the Change?
Microsoft has identified SMS and voice authentication as significantly more vulnerable to:
Phishing attacks
SIM-swapping
Social engineering
MFA bypass attempts
Passkeys use phishing-resistant technology that provides stronger protection while making sign-in simpler for users.
💡 What Should Organizations Do Now?
- Identify users still relying on SMS or voice MFA
- Begin transitioning users to Passkeys and other phishing-resistant authentication methods
- Communicate upcoming changes to employees
- Plan ahead to avoid last-minute disruption before the February 2027 deadline.
📞 Need Help Determining How This Impacts Your Microsoft 365 Environment?
Every organization's Microsoft 365 configuration is different. EAW Tech can help you:
Review your current authentication methods
Identify users affected by the upcoming changes
Develop a Passkey migration strategy
Implement modern, phishing-resistant security practices
Contact the EAW Tech Technical Support Team for guidance specific to your Microsoft 365 environment.
