Microsoft Ditches SMS for Secure Passkeys

Microsoft is actively moving away from SMS for two-factor authentication on personal accounts, citing its susceptibility to fraud and attacks. The company is promoting the use of passkeys as a more secure and seamless alternative to traditional passwords. Passkeys utilize biometric data like fingerprints or facial recognition, or a local PIN, directly on a user's device, making them highly resistant to spoofing.

Users can set up passkeys by visiting their Microsoft account's Advanced Security Options and following on-screen prompts. While SMS authentication was once a convenient method, Microsoft acknowledges its inherent security risks and is prioritizing passwordless solutions. Verified email links will remain an option for account recovery. Microsoft has not provided a timeline for the complete removal of SMS authentication but will soon prompt users to set up passkeys if they haven't already.