Microsoft is phasing out SMS and voice-based MFA in favor of passkeys and other phishing-resistant authentication methods. All of my users currently use Microsoft Authenticator push notifications with number matching. Will this setup continue to be supported, or do we need to migrate everyone to passkeys immediately?
2 Answers
You should be fine for the foreseeable future. Passkeys are becoming the preferred option for newly configured users, so it makes sense to start introducing them over time and enable them for existing users where practical. Some users may already have a passkey through Windows Hello or another supported method.
Availability can depend on the tenant's rollout status, configuration, and which passkey options are enabled. If the option is not displayed yet, Authenticator number matching remains a supported method while passkeys are rolled out.
Yes, Microsoft Authenticator push notifications and number matching are still supported. The retirement plans are aimed at SMS and voice MFA, so you do not need to move everyone immediately.
Are passkeys available right now? I checked the security-info page and do not see passkey listed under the available sign-in methods.