![\"person](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/05\/1779381374_645_0x0.jpg\")
<\/p>\n<\/p>\n
Microsoft starts scrapping 2FA SMS codes.<\/p>\n
getty<\/p>\n
Microsoft has confirmed it is starting to phase out SMS as a method of authentication, as well as account recovery, for all personal Microsoft accounts. If you use SMS as your primary 2FA code delivery mechanism, you might want to change to something else shortly, as Microsoft has yet to clarfiy the timeline for completion of the change, to prevent potential login hassle down the line. <\/p>\n
The short message service has been the default text protocol to send messages between mobile devices for the longest time. But all bad things come to an end, and SMS is truly that as far as security is concerned. That\u2019s what so many people have moved to using encrypted messaging platforms such as WhatsApp and Signal<\/a>. It\u2019s also why Microsoft has announced that it is scrapping the use of two-factor authentication codes sent using SMS for logging into personal Microsoft accounts. <\/p>\n ForbesMicrosoft Confirms Surprising Edge Password Security U-TurnBy Davey Winder<\/a>Microsoft Explains Why It Is Scrapping SMS Authentication<\/p>\n \u201cSMS-based authentication is now a leading source of fraud,\u201d Microsoft has said, \u201cand by moving to passwordless accounts, passkeys, and verified email, we’re helping you stay ahead of evolving threats while making account access simpler and more seamless.\u201d<\/p>\n That fraud comes in many guises, from attacks targeting senior citizens<\/a> to SMS pumping attacks<\/a> that target phone bills, but the type of fraud that Microsoft is addressing with this change is directed at personal account authentication. It doesn\u2019t take a tech genius to realize that transmitting 2FA codes in plain text, using cellular networks, is hardly the most secure method to do so. Interception and SIM-swap attacks are just two of the risks. But that doesn\u2019t really matter; what does is that there are many more secure methods of receiving 2FA codes, by way of an authenticator app, for example, and many more secure methods for logging in, such as a passkey. There really is no need to be using SMS anymore, especially when those other methods are as easy, if not easier, to use. Microsoft itself has now said <\/a>that it \u201cbelieves that the future of authentication is passwordless, secure, and user-friendly.\u201d<\/p>\n Forbes2 New Microsoft Defender Zero-Days Exploited\u2014Patch Now Rolling OutBy Davey Winder<\/a>Microsoft Says Personal Account Users Should Move To Passkeys<\/p>\n Microsoft has confirmed that users signing in to a personal account will be \u201cguided through a simple process to add a verified email and set up a passkey,\u201d so they can both log in and recover the account without using SMS. It is not yet clear what the timeline is for phasing out SMS codes altogether, but I would recommend making the change now to stay on top of things and, it must be said, to improve your security posture at the same time. You can also find out more and register a passkey here<\/a>.<\/p>\n