Updated September 1, 2026: We have updated the timeline. Thank you for your patience.
[What and Why]
We are improving the restore experience for device-bound passkeys in the Microsoft Authenticator app on iOS. This update provides a clearer and more guided restore flow when users move to a new device. It also improves user understanding of cross-device sign-in with passkeys. This update is designed to reduce friction during device migration while maintaining strong security protections.
[Rollout Schedule]
General Availability (Worldwide): Mid-September 2026 (previously August)
[Impact on Your Organization]
Who is affected
- Users with iOS devices who use Microsoft Authenticator with passkeys
- Users restoring Authenticator on a new iOS device
Platforms/Services
- iOS
- Microsoft Authenticator
- Microsoft Entra
What will happen
- This change applies to iOS devices only. Android is not included in this release and will be supported later.
- Users with iCloud and iCloud Keychain backup enabled, and passkeys stored on their previous device, will see the updated experience during device restore.
- Users restoring Authenticator on a new device will see an updated restore experience.
- The restore flow will include:
- A new user interface that guides users based on whether they are setting up a new device or restoring from an existing one
- Improved guidance for using Authenticator passkeys with cross-device sign-in
- The feature is enabled by default.
- No changes to existing admin configurations or policies.
[Action Required/Recommendations]
No action is required.
Consider the following recommendations:
- Inform users about the improved restore experience on iOS devices.
- Update internal helpdesk documentation if you provide guidance for device migration or Authenticator restore scenarios.
[Compliance considerations]
No compliance considerations identified. Review as appropriate for your organization.