What changed
Time to bail on SMS and voice codes for Microsoft Entra sign-in? Act. You can stay. Microsoft stops its own SMS and voice codes on February 1, 2027. Move users to passkeys first.
On our scale this is Act: change a setting or plan before the date. You can stay.
Microsoft Entra stops sending SMS and voice codes itself from February 1, 2027. Admins and external users follow on July 1, 2027. Users who only have SMS or voice must register a passkey at sign-in.
Here are the facts we checked:
- Most users: February 1, 2027 (Microsoft)
- Global Administrators and external users: July 1, 2027 (Microsoft)
- Internal guest users: Follow the February 1, 2027 date (Microsoft)
- Passkeys became the default: September 1, 2026, for users enabled for SMS or voice (Microsoft)
- If a user only has SMS or voice: They must register a passkey during sign-in; the prompt blocks until they do (Microsoft)
- Can you opt out?: No opt-out from the enforcement (Microsoft)
- Microsoft's suggested methods: Passkeys, Windows Hello or FIDO2 keys (Microsoft)
- Still need SMS or voice?: Pick a telephony provider in Microsoft Security Store, from October 30, 2026 (Microsoft)
- Self-service password reset: Also affected (Microsoft)
- Where: Public cloud only; Azure AD B2C is not affected (Microsoft)
- Users who sign in with SMS or voice codes: Must register a passkey from February 1, 2027 (Microsoft)
You can stay on Microsoft Entra ID. You have to change a setting or plan before the date.
Leaving is a choice here, not a must.
Microsoft is the main source for this page. Microsoft Entra ID has not said more than what is listed here. If a fact is not on this page, we do not know it yet.
Who is affected
Users who sign in with SMS or voice codes: Must register a passkey from February 1, 2027.
The date to remember is February 1, 2027. Make the change before then.
What to do before February 1
- Find users on SMS and voice. Use the PowerShell script on the Microsoft page to list users whose sign-in uses SMS or voice.
- Run a passkey campaign. In Entra ID, open Authentication methods > Registration campaign and set it to Microsoft Managed.
- Tell people what to expect. Explain that a passkey prompt will block sign-in until they add one. Start with admins.
A few tips:
- Make the change yourself before the date. Do not wait for the last reminder email.
- Write down your current plan or settings first, so you can compare after the change.
- After the change, open your settings again and check that it worked.
How to tell your users
If the change affects your members or team, send one short email. Say what changes for them and when. Put the most important line first.
If there is a date, send a short reminder a few days before it. Keep a copy of the list you sent it to.
Options people mention
Listed for convenience. Not ranked. Not paid. These names come up in threads and reviews; that does not show where people moved.
Before you pay, check the price page of each tool yourself. Prices change, and we only list what our sources say.
Questions people ask
No questions collected yet.
Sources