Users will soon need to set up an alternative, like a passkey.

Microsoft is pulling the plug on SMS-based two-factor authentication because it has become a leading source of fraud, replacing it with passkeys and verified email.

Microsoft is officially in the process of removing SMS authentication and account recovery as an option from everyone's ...