Microsoft is pulling the plug on SMS codes, wants you to switch to passkeys

Microsoft is phasing out SMS codes for personal account sign-in and recovery.

The company says SMS is vulnerable to phishing, SIM swapping, and similar attacks.

Users will be directed toward passkeys, passwordless sign-in, Windows Hello, and verified secondary email addresses.

The change aims to strengthen account security and reduce hijacking risks.