logo
search
MFA & Verification Issues

Is Microsoft Discontinuing SMS and Phone MFA? How to Verify

Nimra MalikNimra Malik Oct 16, 2026 869 views

Question details

The user is seeking confirmation on Microsoft Message Center ID MC584364, which indicates that SMS and phone-based multi-factor authentication (MFA) will be discontinued.

Is Microsoft Discontinuing SMS and Phone MFA?
Product
Microsoft 365 / Azure Active Directory
Device & OS
not provided
Scenario
Verifying upcoming changes to authentication policies and planning the transition away from SMS-based multi-factor authentication.
Observed behavior
Received an administrative notice (MC584364) stating that two-way SMS and phone MFA will be discontinued on July 10, requiring official confirmation and next steps.
Before you start

Ensure you have Global Administrator or Security Administrator privileges in your Microsoft 365 tenant to review Message Center updates and configure organization-wide authentication methods.

Solution 1Recommended

Review Microsoft's Official Documentation on Two-Way SMS Support

Verify the exact timeline and impact of the two-way SMS and phone MFA deprecation by checking Microsoft's official Azure Active Directory authentication documentation.

Microsoft is actively deprecating two-way SMS for multi-factor authentication in favor of more secure, modern authentication methods. Administrators must review the official documentation to understand the scope of Message Center ID MC584364 and prepare their users for the transition.

1
Access Microsoft Documentation

Navigate to the official Microsoft Learn portal and search for the 'two-way SMS unsupported' documentation under the Azure Active Directory authentication section.

2
Review Deprecation Timelines

Check the specific dates, including the July 10 deadline mentioned in MC584364, to see how and when your organization will be affected.

3
Plan the Transition

Prepare to migrate your users to more secure authentication methods, such as the Microsoft Authenticator app, Windows Hello for Business, or FIDO2 security keys.

Security Recommendation: SMS and phone calls are susceptible to SIM swapping and interception. Transitioning to app-based or hardware-based MFA significantly improves your organization's security posture.
Free Microsoft Office alternative

Looking for a Hassle-Free Office Suite? Try WPS Office

While you navigate complex administrative changes and security updates in Microsoft 365, consider WPS Office as a lightweight, powerful alternative for your everyday document creation. It provides all the essential tools you need without the heavy administrative overhead.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install WPS Office: Run the installer and follow the on-screen instructions to set up the software in minutes.
  3. 3. Open Microsoft Formats: Launch WPS Office and directly open your existing Word, Excel, and PowerPoint files without any formatting loss.
Seamlessly compatible with Microsoft Office formats like .docx, .xlsx, and .pptxLightweight software that runs quickly even on older hardwareFree alternative to expensive monthly subscription modelsFamiliar user interface for a zero-learning-curve transition
microsoft office alternative - wps office

Frequently Asked Questions

Why is Microsoft discontinuing SMS and phone MFA?

Microsoft is deprecating SMS and voice call authentication because they are vulnerable to interception, SIM swapping, and phishing attacks. Microsoft encourages organizations to adopt stronger, phishing-resistant methods like authenticator apps and security keys.

What authentication method should I use instead of SMS?

Microsoft highly recommends using the Microsoft Authenticator app (which supports push notifications and number matching), Windows Hello for Business, or FIDO2 hardware security keys for multi-factor authentication.

Will users lose access on July 10 if they haven't switched from SMS MFA?

Depending on your organization's Conditional Access policies and the specific enforcement date applied to your tenant, users who only have SMS registered may be forced to register a new method upon login, or they could potentially face access issues. Administrators should proactively run registration campaigns before the deadline.