Microsoft Entra ID Is Retiring SMS and Voice MFA: The Timeline, the Risks, and How to Prepare
Starting September 1, 2026, passkeys become the default sign-in experience in Microsoft Entra ID — and on February 1, 2027, Microsoft-provided SMS and voice authentication is retired for every tenant, with no opt-out. Here is the full timeline, why one-time codes over the phone network were never a safe foundation, and a practical checklist for Microsoft 365 administrators.





