Microsoft Is Changing 2FA Requirements for SMS Text & Voice: What You Need to Know

Starting Feb. 1, 2027, Microsoft will no longer support text messages (SMS) or voice calls to verify your identity when signing into your account. If you currently use either option for two-factor authentication (2FA), including SMS through Duo, you will need to switch to a more secure sign-in method, such as the Microsoft Authenticator app, a passkey or a security key.

Why Microsoft Is Making This Change

SMS and voice calls are among the most vulnerable authentication methods because they offer less protection against phishing. Microsoft is moving toward more secure sign-in methods to better protect your data, prevent unauthorized access and support the secure use of artificial intelligence (AI).

What This Means for You

This change affects anyone who uses SMS or voice calls to verify their identity when signing in to Microsoft services. If you currently use either option for 2FA, you will need to set up another sign-in method before Feb. 1, 2027.

Your Secure Sign-In Options

There are several secure sign-in options available. Explore them below to find the best fit for you.

• Microsoft Authenticator: Verify your identity using the app on your phone or tablet.
• Passkeys (recommended option): Create a passkey in Microsoft Authenticator to sign in using your device's security features, such as Face ID, fingerprint or PIN.
• Security keys: Use a physical device, such as a YubiKey, to verify your identity when signing in.

Don’t Want to Use the App?

That’s okay! You can use a physical security key, like a YubiKey, to verify your identity without needing the authenticator app on your phone. Security keys are available for purchase through the UNCW Bookstore. Before purchasing a key, please review our Security Key guidance to ensure it meets UNCW’s requirements.

In certain circumstances, faculty and staff may qualify for a YubiKey through ITS. If you have a specific business need, please review the requirements before submitting a YubiKey request.*

*Please note: All faculty and staff requests for YubiKeys are reviewed by IT Security prior to approval. Approved requests may require departmental payment.

Watch for Microsoft's Sign-In Prompt Starting Jan. 13

To help you switch before Feb. 1, 2027, the “Improve Your Sign-Ins” prompt will begin appearing on Jan. 13, 2027. If you’re still using SMS or voice calls for 2FA, this prompt will appear after you sign in and verify your identity. Simply follow the instructions to set up a more secure sign-in method.

Get Help With the Sign-In Prompt

Important Dates

• Jan. 13: Prompt rollout begins.
• Jan. 28: UNCW’s deadline to complete the campus transition from SMS and voice verification before Microsoft ends support.
• Feb. 1: Microsoft retires SMS and voice verification

We're Here to Help

We understand that changing how you sign in can take some getting used to, and we’re here to help. Visit our Knowledge Base article for guidance, setup instructions, answers to common questions and more. If your department or area would benefit from a meeting with IT Security for additional guidance, please email itsecurity@uncw.edu. We’re here to support you every step of the way.