Goodbye SMS or phone calls — Microsoft is making passkeys the default authentication process for businesses

Summary

Microsoft is phasing out SMS/phone call authentication for Entra ID by February 2027, making passkeys the default by September 2026 to enhance security against AI-assisted phishing.

Key Takeaways

1. Microsoft is making passkeys the default authentication method for Entra ID beginning September 1, 2026.
2. Microsoft will stop providing its own SMS and voice call authentication codes for Entra ID from February 1, 2027.
3. The click-through rate for phishing emails stands at 54% for AI-assisted campaigns, compared with just 12% for conventional ones.

Statement Breakdown

• Claimed Facts: 70% of statements the article presents as facts
• Opinions: 20% of statements classified as editorial or subjective
• Claims: 10% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article presents factual information about Microsoft's upcoming changes to authentication methods. It cites official statements and provides specific dates. The information is presented clearly and directly, with minimal speculation.

Bias assessment: Pro-Technology Adoption. The article frames the shift to passkeys as a necessary and positive advancement driven by technological evolution. It highlights the benefits of passkeys in combating sophisticated attacks, implicitly positioning older methods as obsolete.

Note: This article discusses future technology adoption. While based on official announcements, the full impact and user experience of these changes are yet to be realized.

Credibility flag: Forward-looking tech shift

Claimed Facts (8)

• This is a direct statement of a future policy change with a specific date.
• This is a direct statement of a future policy change with a specific date.
• This sentence confirms Microsoft's official plans and the stated reason for the change.
• This provides specific details about the cessation of SMS/voice authentication and the intended outcome.
• This statement outlines the functional benefit of passkeys in a security context.
• This clarifies that passkeys will not be the sole authentication method, providing additional options.
• This presents a specific statistic attributed to Microsoft regarding phishing effectiveness.
• This is a direct quote from Microsoft summarizing the past utility and current limitations of SMS/voice authentication.

Opinions (5)

• This statement expresses a viewpoint on the necessity of advanced authentication in the current technological landscape.
• This statement articulates Microsoft's strategic goal and justification for implementing passkeys.
• This is an analytical statement about the impact of AI on attack methods, presenting a nuanced perspective.
• This sentence offers an interpretation of user behavior and its consequence, leading to the security push.
• This outlines a recommended course of action, which is a form of strategic opinion or guidance.

Claims (1)

• While supported by a statistic later in the article, this initial statement is presented without immediate context or source, making it a potentially strong but initially unsubstantiated claim.

Key Sources

• Microsoft — Technology Company
• Windows Latest — Technology Publication