The End of SMS Logins

Description

Microsoft has announced that native SMS and voice authentication delivery for Entra will be retired beginning February 1, 2027. Organizations that continue using those methods will need to integrate a third-party provider. The change aligns with Microsoft's broader push toward phishing-resistant authentication methods such as passkeys. SMS and voice authentication can be targeted by social engineering techniques that trick users into sharing one-time codes. Passkeys reduce that risk because there isn't a code for the user to relay or enter into a fraudulent prompt. Organizations still relying on SMS should begin evaluating migration plans before support changes take effect. Has your organization started moving users from SMS codes to passkeys, or is that transition still ahead? Subscribe to our podcasts: https://securityweekly.com/subscribe #EntraID #Passkeys #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec