Microsoft 365 Passkeys
15th September 2026
What you need to know...
Microsoft is changing how users sign in to Microsoft 365, moving towards passkeys and away from traditional SMS and voice verification.
If you or your team currently receives a text message or phone call to verify their identity when signing in, this is a change you need to prepare for.

What is a passkey?
A passkey is a safer and simpler way to sign in to Microsoft 365.
Instead of relying on a password or SMS code, users can verify their identity using a trusted device with methods such as:
- Fingerprint or facial recognition
- A device PIN
- Microsoft Authenticator
- A compatible security key
Passkeys are designed to be phishing-resistant, making it much harder for cyber criminals to steal or trick users into handing over their login details. They can also make signing in quicker and easier for users.
Why is Microsoft making the change?
Passwords and SMS codes can be targeted by cyber criminals through phishing and other attacks.
Passkeys provide stronger protection because there isn't a password or verification code that can simply be copied and entered into a fake website. The result is better security with a simpler sign-in experience.
When is it happening?
1 September 2026 Microsoft began moving users who use SMS or voice authentication towards passkeys. Some users may now be prompted to register a passkey when signing in.
1 February 2027 Microsoft-provided SMS and voice authentication will be retired. Businesses should make sure affected users have an alternative authentication method set up before the deadline.
Do I need to do anything?
If your business or school use Microsoft 365, now is a good time to check how your users are signing in.
In particular, you should identify anyone still relying on SMS or voice authentication and make sure an appropriate alternative is configured and tested before February 2027. You don't necessarily have to wait for Microsoft to prompt your users. Planning the change in advance can make the transition much smoother.
Need help with Microsoft 365 passkeys?
Bowker IT can help you get ready.
We can review your current Microsoft 365 authentication setup, identify users affected by the changes and help you introduce passkeys securely with minimal disruption.
Speak to Bowker IT today to make sure you are ready for February 2027.