Microsoft advances passwordless security via passkeys and Edge updates

Microsoft is accelerating its transition toward passwordless authentication across its ecosystem. For Microsoft Entra ID, passkeys are set to become the primary authentication method starting September 1, 2026. As part of this shift, the company plans to phase out SMS and voice-based authentication, with a complete discontinuation scheduled for February 1, 2027.

On the consumer and desktop side, Windows 11 is increasingly integrating passkeys as a first-class security feature, utilizing TPM 2.0 chips and Windows Hello biometrics to provide phishing-resistant logins. Additionally, Microsoft is testing a new feature in the Edge browser Canary build that could automatically detect and replace weak passwords with stronger ones, a move aimed at reducing security risks through automation.

These updates represent a broader strategic push to replace traditional, vulnerable credentials with cryptographic keys and biometric-backed authentication to enhance identity governance and user security.