Skip to content
Tech News
← Back to articles

Microsoft won't send you SMS texts for login anymore - why it's pushing passkeys instead

read original get Yubico Security Key → more articles
Why This Matters

Microsoft is discontinuing SMS-based authentication for its accounts due to its vulnerability to hacking methods like SIM swapping and phishing. Instead, the company is promoting passkeys, which provide a more secure, passwordless login experience. This shift reflects a broader industry move toward stronger, more secure authentication methods to protect consumers and digital services.

Key Takeaways

Screenshot by Lance Whitney/ZDNET

Follow ZDNET: Add us as a preferred source on Google.

ZDNET's key takeaways

Microsoft is phasing out SMS as an authentication method.

SMS messages are unencrypted and vulnerable to hackers.

Microsoft account owners will be prompted to set up a passkey instead.

When trying to sign-in to or recover one of your online accounts, you'll often receive a text message that prompts you to verify that you're the account owner. But that SMS-based message is not a secure authentication method. Now, Microsoft is putting the brakes on it for anyone who uses a Microsoft account.

Also: How passkeys work: The complete guide to your inevitable passwordless future

On a new support page, Microsoft announced that it will start phasing out SMS as an authentication and account recovery method for personal Microsoft accounts. Instead, the company is pushing passkeys, which offer much stronger security.

... continue reading