passkeys and mfa

Microsoft has begun phasing out SMS codes for authentication and account recovery on personal Microsoft accounts in May 2026, steering users toward passkeys, authenticator apps, and verified email instead of text-message verification. The company’s blunt explanation is that SMS-based...