InsightsSecurity

Passkeys are now the default in Microsoft Entra ID

As of September 2026, passkeys are the recommended sign-in method in Microsoft 365. Users will notice it the next time they sign in.

What is happening?

On September 1, 2026, Microsoft began rolling out passkeys as the default sign-in method in Entra ID. When the change reaches your organization, users who currently rely on SMS or voice calls are automatically enabled for passkeys – and are prompted to register one the next time they complete multi-factor authentication (MFA).

Why passkeys?

Passkeys use cryptography instead of codes that can be intercepted or phished from the user. That makes them phishing-resistant. Users who already use passkeys, Windows Hello for Business, or security keys can continue as before. Passkeys are included in all Entra plans.

What we recommend

  • Notify users before they are prompted to register a passkey
  • Test with a pilot group first
  • Make sure everyone has at least one phishing-resistant method
  • Check who is still using SMS or voice calls

How we can help

Wondering what this means for your organization? Let's talk.

Request a meeting →

Read next

All articles →

Need an IT provider that understands your business?

Tell us a little about your business and what you need help with, and we'll reach out to schedule a no-obligation conversation.

Or call +47 977 99 889, or email post@iqonic.no.

post@iqonic.no