Microsoft is phasing out SMS-based two-factor authentication for local account logins, citing security vulnerabilities. The company advocates for passkeys, which utilize biometric data or local security features for safer authentication. Users are encouraged to set up passkeys to enhance security while the transition away from SMS begins.

• 01Microsoft is discontinuing SMS-based two-factor authentication due to its vulnerability to fraud and exploitation.
• 02Passkeys are designed to enhance security by using biometric data or local passwords, making them nearly impossible to spoof.
• 03Users can set up passkeys by accessing their Microsoft account's Advanced Security Options and selecting their preferred authentication method.
• 04While passkeys are more secure, they may not always be convenient for users setting up new devices or temporary systems.
• 05Microsoft has not announced a specific timeline for fully phasing out SMS messages as a secondary authentication method.

The transition to passkeys will enhance security for users, reducing the risk of fraud associated with SMS-based authentication.