Patience is a Virtue – Microsoft Is Retiring SMS-Based MFA: What You Need to Know
Microsoft Is Changing How You Log Into Microsoft 365. Here’s What You Need to Know.
If your organization uses Microsoft 365, a significant change is coming that could affect how your employees sign in to email, Teams, SharePoint, and other Microsoft services.
Microsoft has announced that it is moving away from security codes delivered by text message (SMS) and phone calls as a way to verify user logins. Businesses that still rely on these methods will need to transition to newer authentication options over the next several months.
What Is Changing?
Today, many Microsoft 365 users receive a text message with a code when they log in. Others receive an automated phone call to verify their identity.
Microsoft plans to phase out these built-in verification methods and replace them with more secure options. Starting September 1, 2026, users who currently use text messages or phone calls will begin seeing prompts to set up newer authentication methods.
On February 1, 2027, Microsoft’s built-in SMS and voice authentication services will be retired. Organizations that have not transitioned users to another method before then may experience login disruptions.
Why Is Microsoft Doing This?
Cybercriminals have become increasingly effective at stealing text message verification codes and exploiting weaknesses in mobile phone networks. While text message verification was once considered a major security improvement, newer technologies provide significantly stronger protection against modern attacks.
Microsoft is encouraging organizations to adopt these newer methods before the retirement deadlines arrive.
What Will Businesses Need To Do?
The good news is that most organizations will not need to purchase new software or make major infrastructure changes.
Instead, users will need to move to one of Microsoft’s newer verification methods, such as:
- Microsoft Authenticator push notification approvals
- One-time codes generated by an authentication app (Google Authenticator, Microsoft Authenticator, or TOTP built into Password Programs)
- Passkeys using a computer, phone, fingerprint, or facial recognition
- Hardware security keys for users who require enhanced security (yubiKey®)
The best solution will depend on your users, devices, security requirements, and business processes.
Don’t Wait Until The Deadline
Many companies have dozens or even hundreds of employees using text-message verification today. Waiting until the last minute can create unnecessary confusion, support calls, and user frustration.
We recommend identifying affected users now and gradually move them to newer authentication methods long before Microsoft’s February 2027 deadline.
How Ariel IT Services Can Help
If you’re not sure how your employees currently sign in to Microsoft 365, you’re not alone. Most business owners have never had to think about the technology behind the login process.
Our team can quickly assess your Microsoft 365 environment, identify users who may be affected by Microsoft’s upcoming changes, and recommend the simplest and most secure path forward for your organization.
Whether you’re an existing client or a business looking for assistance with Microsoft 365 security, Ariel IT Services can help make the transition smooth, secure, and frustration-free.
Contact Ariel IT Services today to schedule a Microsoft 365 security review and ensure your organization is prepared well before Microsoft’s February 2027 deadline.
Ariel IT helps businesses simplify technology, strengthen cybersecurity, and stay compliant with evolving standards. As Business Professionals - Technical Experts, we partner with organizations to deliver reliable IT solutions that support growth and peace of mind. Contact us to learn more