← cd ~/topics
// topics
Passkeys and passwordless
Moving users off passwords and SMS codes: passkeys, Authenticator and the authentication method changes Microsoft is making.
Start here
- Temporary Access Pass: onboarding users without a password
A Temporary Access Pass lets a new starter, or someone who's lost their phone, sign in once and set up a passkey or Authenticator. - Authentication strengths: requiring the right kind of MFA
Requiring MFA treats an SMS code and a passkey as equals. Authentication strengths let you say which methods are good enough for which resources.
Coming up
- 1 Feb 2027 Microsoft-provided SMS and voice MFA retired
- 2 Feb 2027 Entra Connect 2.5.190.0 reaches end of support
- 7 Apr 2027 Entra Connect Sync must use app-based auth
- 1 Jul 2027 SMS and voice retirement for Global Admins and external users
- 1 Jul 2027 Microsoft-provided SMS and voice MFA retired for Global Administrators and external users
Learning paths
Reference and tools
All Passkeys and passwordless posts (5)
- Microsoft is retiring its own SMS and voice MFA. Here's your plan. 4 Sept 2026
- System-preferred authentication now picks the first factor too 27 May 2026
- Synced passkeys and passkey profiles are now GA in Entra ID 18 Mar 2026
- Authentication strengths: requiring the right kind of MFA 10 Dec 2025
- Temporary Access Pass: onboarding users without a password 15 Oct 2025