NewsPublished 21 Sep 2026

Microsoft reminds admins to migrate Entra ID users to passkeys

Source Bleeping Computer

phishing

Description

Microsoft has issued a reminder for administrators to migrate Entra ID users to phishing-resistant authentication methods, such as passkeys, ahead of the planned retirement of SMS-based first-factor sign-in in February 2027. This change aims to improve security by reducing reliance on less secure SMS authentication.

Impact

If administrators do not migrate users to phishing-resistant authentication methods before the retirement date, users may experience sign-in disruptions. The change improves overall security posture by removing SMS-based authentication, which is vulnerable to interception and phishing attacks.

Defensive guidance

Administrators should begin migrating Entra ID users to phishing-resistant authentication methods such as passkeys well before February 2027 to avoid sign-in disruptions. This is a planned change by Microsoft, not a vulnerability requiring emergency patching.

References

bleepingcomputer.com/news/microsoft/microsoft-reminds-admins-to-migrate-entra-id-users-to-passkeys/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 21 Sep 2026, 13:16 UTC

References

Community reviews

Related threats