Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft Entra ID will make passkeys the default phishing-resistant authentication method starting Sept 1, 2026, auto-enabling passkeys for users who currently use SMS or voice and prompting them at next MFA sign-in; Microsoft will retire its native SMS/voice telecom delivery on Feb 1, 2027, after which organizations requiring SMS/voice must contract third-party telecom providers via the Microsoft Security Store. The announcement explains the security rationale (AI-enabled phishing and SIM swap risks), provides a timeline and migration guidance (identify users, plan passkey rollout, run registration campaigns, and prepare communications), and lists key dates for provider selection and enforcement.