What is happening?
On September 1, 2026, Microsoft began rolling out passkeys as the default sign-in method in Entra ID. When the change reaches your organization, users who currently rely on SMS or voice calls are automatically enabled for passkeys – and are prompted to register one the next time they complete multi-factor authentication (MFA).
Why passkeys?
Passkeys use cryptography instead of codes that can be intercepted or phished from the user. That makes them phishing-resistant. Users who already use passkeys, Windows Hello for Business, or security keys can continue as before. Passkeys are included in all Entra plans.
What we recommend
- Notify users before they are prompted to register a passkey
- Test with a pilot group first
- Make sure everyone has at least one phishing-resistant method
- Check who is still using SMS or voice calls
How we can help
Wondering what this means for your organization? Let's talk.
Request a meeting →