Microsoft is scrapping SMS 2-factor authentication because it's "a leading source of fraud"
Microsoft has announced it will discontinue SMS-based two-factor authentication (2FA) due to its vulnerability to fraud. The company plans to transition to more secure methods such as passkeys and verified email for account verification. This move aims to enhance security and user experience by making it more difficult for hackers to gain access to accounts.
- ▪Microsoft is scrapping SMS 2FA because it is considered insecure and a leading source of fraud.
- ▪The company will promote passwordless options like passkeys and verified email for improved security.
- ▪SMS 2FA has become a major attack vector for hackers trying to access accounts.
Opening excerpt (first ~120 words) tap to expand
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": "1", "name": "Home", "item": "https://www.xda-developers.com/" }, { "@type": "ListItem", "position":"2", "name": "Software and Services", "item": "https://www.xda-developers.com/software-and-services/" }, { "@type": "ListItem", "position":"3", "name": "Microsoft is scrapping SMS 2-factor authentication because it's \"a leading source of fraud\"", "item": "https://www.xda-developers.com/microsoft-is-scrapping-sms-2-factor-authentication-because-its-a-leading-source-of-fraud/" } ] } Microsoft is scrapping SMS 2-factor authentication because it's "a leading source of fraud" By Simon Batt Published May 18, 2026, 8:56 PM EDT Simon is a Computer Science BSc graduate who has…
Excerpt limited to ~120 words for fair-use compliance. The full article is at XDA Developers.