MC1423108: Microsoft Entra Improves Authenticator Passkey Restore Experience on iOS

MWPRO IMPACT SCORE
OPERATIONAL IMPACT
29
0 25 50 75 100
MODERATE IMPACT • ASSESS BUSINESS IMPACT
Recommended Action:
Take a look and decide whether this affects your tenant, users or support teams.
What is MWPro Impact Score? Watch our 60‑second explainer

Primary Audience

Microsoft 365 AdminsSecurity TeamsIT ManagersService OwnersEnd Users
Why this score?
AI Confidence
HIGH
Enough detail is available to trust this assessment.
Assessment Reasoning
The update delays general availability to mid-September 2026 and improves the iOS Authenticator restore experience for passkeys. Admin configuration remains unchanged, so direct admin work is minimal, but helpdesk documentation and awareness may need updates. Users restoring devices will see a new guided interface, causing moderate visible change. Urgency is low as no mandatory action exists, but awareness before rollout is useful.
25
🛡️ Admin Impact
40
👥 User Impact
30
Urgency
20
🔧 Effort
ℹ️ WHAT YOU NEED TO KNOW
📌

AT A GLANCE

Authenticator on iOS gets a clearer restore flow for passkeys to make device migration easier while keeping security intact.
👥

END USERS

Users restoring Authenticator on new iOS devices will notice a guided restore process and better passkey instructions.
🛡️

IT ADMINS

Worth informing support teams and updating helpdesk guidance for iOS device migration scenarios.
📅

ROLLOUT TIMELINE

Upcoming:
Mid-September 2026

📢 Official Microsoft Message Center Announcement


(Updated) Microsoft Entra: Improved restore experience for Authenticator passkeys on iOS
Message ID: MC1423108 (Updated)

Updated September 1, 2026: We have updated the timeline. Thank you for your patience. 

[What and Why]

We are improving the restore experience for device-bound passkeys in the Microsoft Authenticator app on iOS. This update provides a clearer and more guided restore flow when users move to a new device. It also improves user understanding of cross-device sign-in with passkeys. This update is designed to reduce friction during device migration while maintaining strong security protections.

[Rollout Schedule]

General Availability (Worldwide): Mid-September 2026 (previously August)

[Impact on Your Organization]

Who is affected

  • Users with iOS devices who use Microsoft Authenticator with passkeys
  • Users restoring Authenticator on a new iOS device

Platforms/Services

  • iOS
  • Microsoft Authenticator
  • Microsoft Entra

What will happen

  • This change applies to iOS devices only. Android is not included in this release and will be supported later.
  • Users with iCloud and iCloud Keychain backup enabled, and passkeys stored on their previous device, will see the updated experience during device restore.
  • Users restoring Authenticator on a new device will see an updated restore experience.
  • The restore flow will include:
    • A new user interface that guides users based on whether they are setting up a new device or restoring from an existing one
    • Improved guidance for using Authenticator passkeys with cross-device sign-in
  • The feature is enabled by default.
  • No changes to existing admin configurations or policies.

[Action Required/Recommendations]

No action is required.

Consider the following recommendations:

  • Inform users about the improved restore experience on iOS devices.
  • Update internal helpdesk documentation if you provide guidance for device migration or Authenticator restore scenarios.

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

Source: Microsoft Message Center • Analysed by MWPro

<<< [MC1423108] Archive
Tooltip: View earlier revisions of this post

Share This Update