09/22/2026
Does your business still receive Microsoft 365 MFA codes by text message?
There's an important change coming.
Microsoft will retire its own SMS and voice authentication delivery on February 1, 2027, as it moves organizations toward stronger phishing-resistant authentication such as passkeys.
The transition has already begun.
Users who currently use SMS or voice are being prompted to register passkeys, and Microsoft has now published information for organizations that have a legitimate reason to continue using SMS or voice through supported third-party telecom providers.
For most businesses:
🔐 Identify employees still using SMS MFA
🔑 Start moving users toward passkeys
👤 Prioritize administrator accounts
📣 Prepare employees for the change
📅 Don't wait until February
Text-message MFA was an important improvement over passwords alone.
But attackers have become better at stealing or bypassing those codes.
The next step is authentication that's much harder to phish.
Need help reviewing your Microsoft 365 authentication settings? 24uNet can help.
Source: Microsoft Entra ID authentication guidance.
🛡️ 24uNet | Managed IT • Cybersecurity • Microsoft 365 • Backup & Recovery
🌐 www.24unet.com