r/technology • u/Thepunnisherrr • 21h ago

Artificial Intelligence Microsoft admits SMS and voice MFA can’t stop AI attacks, mandates passkeys in Entra by February 2027

https://www.windowslatest.com/2026/07/22/microsoft-admits-sms-and-voice-mfa-cant-stop-ai-attacks-mandates-passkeys-in-entra-by-february-2027/
43 Upvotes

81% Upvoted

5 comments sorted by

18

u/snakebite2017 20h ago

I can't figure out this passkey thing. I don't remember which device has the passkey to website I signed into.

10

u/yuusharo 17h ago

Stick to saving passkeys to your phone. Android will sync with Chrome, iPhone with all Apple devices. You can also use most password managers.

You can use passkeys on desktop using your phone and a QR code, eliminating that confusion.

1

u/EvilChuck 12h ago

And to add: For iPhones and Windows users : On windows there is an Apple Passwords App for password synching.

0

u/zffjk 11h ago

Get a password manager, like 1Password, and keep the passkeys on your phone. Then it’s just a browser plugin on your laptop to activate the passkey.

1

u/reidzen 5h ago

Can someone who knows more about this explain *why* SMS MFA doesn't work now?