MC1423108 - (Updated) Microsoft Entra: Improved restore experience for Authenticator passkeys on iOS
Microsoft 365 Message Center announcement MC1423108.
Microsoft Summary
Microsoft Entra improves the iOS Microsoft Authenticator app's passkey restore experience with a clearer, guided flow for device migration, launching worldwide mid-September 2026. It affects iOS users with iCloud backup, requires no action, and includes updated user guidance without policy changes.
- Message Center ID
- MC1423108
- Category
- plan For Change
- Severity
- normal
- Services
- Microsoft Entra
- Tags
- Updated message, Feature update, User impact, Admin impact
- Published
- 2026-07-10
- Last updated
- 2026-09-01
- Expires
- 2026-10-26
Updated September 1, 2026: We have updated the timeline. Thank you for your patience. [What and Why] We are improving the restore experience for device-bound passkeys in the Microsoft Authenticator app on iOS . This update provides a clearer and more guided restore flow when users move to a new device. It also improves user understanding of cross-device sign-in with passkeys. This update is designed to reduce friction during device migration while maintaining strong security protections. [Rollout Schedule] General Availability (Worldwide): Mid-September 2026 (previously August) [Impact on Your Organization] Who is affected Users with iOS devices who use Microsoft Authenticator with passkeys Users restoring Authenticator on a new iOS device Platforms/Services iOS Microsoft Authenticator Microsoft Entra What will happen This change applies to iOS devices only . Android is not included in this release and will be supported later. Users with iCloud and iCloud Keychain backup enabled , and passkeys stored on their previous device , will see the updated experience during device restore . Users restoring Authenticator on a new device will see an updated restore experience. The restore flow will include: A new user interface that guides users based on whether they are setting up a new device or restoring from an existing one Improved guidance for using Authenticator passkeys with cross-device sign-in The feature is enabled by default . No changes to existing admin configurations or policies. [Action Required/Recommendations] No action is required. Consider the following recommendations: Inform users about the improved restore experience on iOS devices. Update internal helpdesk documentation if you provide guidance for device migration or Authenticator restore scenarios. [Compliance considerations] No compliance considerations identified. Review as appropriate for your organization.