Microsoft Plans to End SMS and Voice Authentication for Entra ID
Microsoft reportedly plans to end SMS and voice authentication for Microsoft Entra ID. According to an administrator notice reported by Windows Latest, tenants must register passkeys by Sept. 1 for voice or SMS sign-ins, and SMS and voice verification will be terminated Feb. 1, 2027. Microsoft says these methods are weaker against phishing and SIM-swap attacks.
How this was made
The 30-second read
Why it matters
The enforcement timeline forces organizations to onboard passkeys before SMS/voice are disabled, raising near-term operational and recovery-process risks while aligning with stronger security posture.
Market read
Traders may view this as a security-driven product policy shift that can influence enterprise IAM spending and migration timelines, though no direct financial metrics are provided.
What to watch
The article does not quantify tenant readiness, passkey availability across device fleets, or any pricing/support changes tied to the enforcement, which could materially affect customer impact.
Background
Microsoft Entra ID currently supports SMS and voice-based authentication, which are considered weaker against phishing and related social engineering attacks.
Ticker impact
Microsoft plans to require Entra ID tenants to register passkeys by Sept. 1 and end SMS and voice verification by Feb. 1, 2027.
Near-term impact likely limited, but medium-term could support security-related demand while creating short-term implementation friction.
The article discloses a concrete, time-bound product enforcement timeline for Microsoft’s identity platform, which can affect customer adoption and support costs, but it does not provide financial guidance or immediate revenue numbers.
Market effects
Could accelerate enterprise adoption of phishing-resistant authentication (passkeys), benefiting identity and security tooling ecosystems.
Primarily US and global enterprise IT, with compliance-driven urgency likely across major markets.
Passwordless migration timelines may influence global IAM and cybersecurity procurement cycles.
Counterpoint
Mandating passkeys could increase support burden and create migration delays, potentially harming enterprise satisfaction more than it boosts security demand.
Key entities
- product/platformMicrosoft Entra ID
Microsoft’s corporate identity and access management service where SMS and voice authentication will be phased out.
- authentication methodPasskeys
Phishing-resistant, device-level authentication mechanism organizations must register before SMS/voice termination.
