ST-2026-175 · Authentication & identity
Microsoft Entra makes passkeys default before retiring Microsoft-provided SMS and voice
From 1 September 2026, Microsoft Entra ID auto-enables passkeys and registration nudges for users enabled for SMS or voice; Microsoft-provided SMS and voice delivery then fully retires on 1 February 2027.
Previous state
Microsoft Entra public-cloud tenants could rely on Microsoft-provided SMS or voice delivery for enabled authentication flows without the new automatic passkey-enablement policy.
Current state
Beginning 1 September 2026, users enabled for SMS or voice are brought into the passkey registration experience; beginning 1 February 2027, Microsoft-provided SMS and voice delivery is retired and the final enforcement has no opt-out.
Affected users
Who needs to care
Microsoft Entra public-cloud tenants with users enabled for Microsoft-provided SMS or voice authentication, including MFA and related sign-in flows.
Required response
What to do
Identify SMS and voice users, move them to phishing-resistant methods such as passkeys, test registration and support flows, and evaluate a customer-managed telecom provider only where a continuing operational or regulatory need exists.
Evidence boundary
What the source does not prove
The timeline applies to Microsoft Entra public-cloud environments. Microsoft documents a temporary opt-out for the automatic passkey-enablement period, but there is no opt-out from the 1 February 2027 enforcement. Customer-managed telecom providers are a separate continuation path for organisations that still require SMS or voice.
Lifecycle history
Dated event sequence
- Current transition guidance updated
Microsoft updated the public-cloud passkey and SMS/voice retirement guidance.
- Automatic passkey enablement begins
Users enabled for SMS or voice are auto-enabled for passkeys and targeted by the Microsoft-managed registration campaign.
- Microsoft-provided telecom delivery retires
Microsoft-provided SMS and voice fully retire in Entra ID; the final enforcement has no opt-out.
Evidence ledger
First-party sources
- 01Microsoft Learn — Passkeys by default and retirement of Microsoft-provided SMS and voice authentication
Official Microsoft Entra authentication transition and enforcement timeline · 2026-08-03
Open official source ↗