What is a Passkey?
A Passkeyis a modern way to log in without a password or SMS codes. Instead, it uses something you already use every day, such as a fingerprint, facial recognition, or the PIN on your computer or cell phone.
For users, this means faster and easier logins. For the organization, it means significantly better protection against phishing, stolen passwords, and account takeovers. Passkeys are also the authentication method that Microsoft highlights as a central part of future identity protection.
Important Dates
September 1, 2026
Microsoft will automatically begin prompting users who currently use SMS or phone calls for MFA to register a passkey.
February 1, 2027
Microsoft will completely discontinue support for SMS- and call-based MFA. Organizations that still rely on these methods will need to have transitioned to other authentication solutions by then.
What does Microsoft recommend?
Microsoft recommends that organizations:
- Ensures that all users have MFA enabled.
- We are gradually transitioning to modern authentication methods that are secure against phishing.
- Implement Passkeys as a long-term, future-proof authentication solution.
- Reduces reliance on text messages and phone calls for verification.
What should you be doing right now?
Even though the deadline is still some time away, we recommend starting the work now to avoid stress and unnecessary operational disruptions down the line.
We recommend that you:
- Identifying which authentication methods are currently in use.
- Identifies users who still use text messages or phone calls for MFA.
- Ensures that all users have MFA enabled.
- Develop a plan for transitioning to Passkeys.
- Notifies users well in advance of the change taking effect.
- Tests and verifies that the organization's various units and work processes are compatible with Passkeys.
Our recommendation for users
To ensure a seamless and robust solution, we recommend that each user register at least two Passkeys:
- A Passkey on your cell phone via Microsoft Authenticator.
- A Passkey on the work computer using Windows Hello and the personal PIN.
This provides users with a backup solution in case their phone is lost or replaced, while also making it easy to log in regardless of whether they’re working from a phone, tablet, or computer.