Microsoft retires SMS and voice MFA on 1 February 2027

Microsoft will retire its own SMS and voice multi-factor authentication methods on 1 February 2027 for all users except Global Administrators and external users. Users whose only MFA method is SMS or voice must register a passkey at sign-in to keep access. Global Administrators and external users follow on 1 July 2027.

• Retirement covers all users except Global Admins and external users
• Internal guests follow the February date, not the July one
• Sign-in is blocked until a passkey is registered; no opt-out
• Affected users can be listed via the Entra ID registration report