Upcoming Changes to Microsoft Multifactor Authentication (MFA)

To enhance account security and better protect against phishing and identity theft, Microsoft is changing the way multifactor authentication (MFA) works for Microsoft 365 accounts. Microsoft is transitioning away from text message (SMS) and phone call verification methods and moving to more secure authentication options. [microsoft.com]

What Is Changing?

Beginning in Fall 2026, Microsoft will begin prompting users who currently authenticate using text messages or phone calls to enroll in a more secure authentication method. Microsoft has announced that its native SMS and voice authentication services will be retired on February 1, 2027. [microsoft.com]

What We Recommend

We strongly recommend that students, faculty and staff use the Microsoft Authenticator app as their primary MFA method. Authenticator apps provide a faster, more convenient, and significantly more secure experience than receiving verification codes by text message. Microsoft specifically recommends moving users to passkeys and other phishing-resistant authentication methods. [microsoft.com]

Why the Change?

Traditional SMS and phone-based verification methods are increasingly vulnerable to phishing attacks, SIM-swapping, and other forms of credential theft. Passkeys and authenticator apps use more secure technology that helps protect your account from these threats while making sign-in easier. [microsoft.com]

What You Need to Do

If you currently use a phone number to receive MFA codes:

1. Install Microsoft Authenticator on your mobile device.
2. Go to https://mysignins.microsoft.com/security-info.
3. Click on “Add sign-in method”.
4. Select the “Microsoft Authenticator” option. Do not select the “Passkey in Microsoft Authenticator” option.
5. Follow the prompts to sync your phone with the Microsoft Authenticator app. You will be asked to confirm the setup.
6. Remove your phone number as your primary MFA method once setup is complete.

Creating Passkeys

A passkey allows you to sign in to your Microsoft work or school account using Windows Hello (PIN, Face, Fingerprint), a mobile device, or a security key. Instructions on how to create passkeys can be found at https://support.microsoft.com/en-us/accounts-billing/security/create-save-passkey.

Need Help?

If you need assistance setting up Microsoft Authenticator or updating your MFA settings, please contact the OIT Help Desk at 716-614-6730 or stop by our office in A-131.

Thank you for helping us keep your account and college resources secure.

Sincerely,

Office of Information Technology

SUNY Niagara