Why are users being pushed to register passkeys by default?
Our organization is suddenly seeing users prompted to register passkeys, even though we have SMS and voice authentication disabled. I also understand that Microsoft is moving away from…
SMS authentication
Why do online services still rely on phone numbers for verification?
Phone numbers can be changed, spoofed, reassigned, or recycled, yet many services still use them for account verification and two-factor authentication. What advantages make phone verification practical enough…
Why do services still rely on phone numbers for account verification?
Phone numbers can be changed, spoofed, reassigned, or recycled, yet many services still use SMS or phone calls to verify accounts and support two-factor authentication. What makes phone-based…
How Will Microsoft’s SMS and Voice MFA Retirement Affect Existing Users?
I'm reviewing Microsoft's guidance on the retirement of SMS and voice authentication, which begins September 1, 2026, and I'm trying to understand how it will affect users with…
How can I permanently remove SMS and voice-call MFA methods from an account or tenant?
An account already has Microsoft Authenticator and another authenticator app configured as its default sign-in methods. SMS and voice-call MFA are being phased out, but a phone number…
How to Enforce MFA with Authenticator App Instead of SMS?
I'm trying to set up my account to force users to use an Authenticator app for multi-factor authentication (MFA) instead of SMS. My current Conditional Access (CA) policy…