Microsoft is moving to passkeys as the preferred way to verify your identity when signing in a stronger, more phishing resistant method than text messages or phone calls. As part of this change, Microsoft will be retiring text message and phone call verification codes over the next several months. IT Services is preparing for this transition to help ensure uninterrupted access to Microsoft 365 and other University resources. They’ are giving everyone plenty of time to get set up, so there’s no need to worry, but everyone should start preparing now.
What Will Change?
If you currently verify your sign-ins using a text message or phone call code, you’ll need to switch to the Microsoft Authenticator app on your mobile device. Authenticator lets you approve sign-ins with a simple tap, and depending on your device, you may also be able to use your PIN, fingerprint, or face recognition to verify it’s you. Setting it up takes about 2 minutes, and Microsoft walks you through the process step by step right on your phone.
This transition happens in two steps:
1. Install and set up Microsoft Authenticator (replaces text message/phone call codes for everyday sign-in verification)
2. Register a passkey inside Microsoft Authenticator, a follow up step you’ll be prompted to complete once Authenticator is set up, providing an even stronger, password free way to sign in
No Action Is Required Today
However, IT strongly encourages you to install and set up Microsoft Authenticator now, before you’re prompted to do so. Getting ahead of this will help you avoid any interruption to your access.
In the coming weeks, you’ll receive step-by-step instructions on how to:
• Install Microsoft Authenticator on your mobile device
• Connect Microsoft Authenticator to your OLLU account
• Complete the registration process
• Use Microsoft Authenticator when signing in
What Should I Expect?
Beginning September 1, 2026, if you’re still using text message or phone call codes to sign in, you may start seeing prompts to set up a passkey. To complete this step, you’ll need Microsoft Authenticator installed first, which is exactly why they are asking you to set it up now, ahead of time.
After February 1, 2027, text message and phone call verification will be fully retired. If Authenticator is not yet set up by that date, you will be unable to sign in until you register a passkey. There is no opt-out for this transition.
What if I Already Use Microsoft Authenticator?
If you’re already using Microsoft Authenticator with your OLLU account, you’re ahead of the curve. You’ll simply be prompted to complete the additional passkey registration step when it becomes available to you, no need to do anything before then.
A Note on Security
Please do not approve an authentication request you did not initiate. If you receive an unexpected Microsoft Authenticator sign-in prompt, deny it immediately and contact Information Security Officer Greg Garza: gjgarza@ollusa.edu. IT Services is here to help every step of the way. If you have questions or need assistance getting set up, please reach out.