Microsoft just set a hard deadline for the end of SMS authentication. Starting September 1, 2026, passkeys become the default sign-in experience in Entra ID. On February 1, 2027, Microsoft retires its SMS and voice delivery entirely, and users without another method will hit a blocking registration prompt. We broke down the full timeline, who is affected, and the three realistic paths forward in the blog.
A security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity for a login or other transaction.
