Microsoft Entra to retire SMS and voice MFA by 2027

Microsoft is transitioning authentication within Entra away from SMS and voice-based multi-factor authentication (MFA) in favor of more secure, phishing-resistant options like passkeys.

According to technical outlines, Microsoft will automatically enable passkeys for users currently relying on phone-based methods starting September 1, 2026. The company plans to fully retire its built-in SMS and voice delivery services on February 1, 2027. Following this retirement, organizations that require phone-based delivery must utilize a customer-managed telecom provider from the Microsoft store.

Administrators are advised to audit both modern and legacy configurations, as certain Self-Service Password Reset (SSPR) settings may still allow SMS usage even when legacy MFA options appear disabled. Users whose only authentication or recovery method is SMS or voice will encounter a blocking prompt requiring them to register a passkey to continue signing in.