Microsoft plans to end SMS two-factor authentication, potentially setting the pace for a passwordless Windows 11 future: “SMS as MFA is horribly vulnerable on multiple fronts.”
windowscentral.com May 20, 2026

Microsoft plans to end SMS two-factor authentication, potentially setting the pace for a passwordless Windows 11 future: “SMS as MFA is horribly vulnerable on multiple fronts.”

AI-summarised brief · reviewed before publication

Microsoft plans to discontinue SMS two-factor authentication for personal Microsoft accounts, replacing it with more secure options like passkeys, authenticator apps, and verified email addresses. The company believes this change will help users stay ahead of evolving threats while making account access simpler and more seamless. Passkeys are considered a more secure option due to their phishing-resistant nature and ability to use device biometric authentication. This change is part of Microsoft's goal to create a passwordless future for Windows 11 users.

💡 Why It Matters

  • · The shift away from SMS-based authentication highlights the growing concern over cybersecurity threats and the need for more robust security measures.
  • · As Microsoft sets the pace for a passwordless future, other companies may follow suit, potentially leading to a significant overhaul of traditional authentication methods.