PSA: Microsoft Is Removing SMS Authentication From Everyone’s Xbox Account
Microsoft is phasing out SMS text message authentication from personal Microsoft accounts, with implications for Xbox users. Rather than relying on six-digit verification codes sent via text message for identity confirmation during sign-in attempts, the company is transitioning users toward more advanced security methods, including passkeys that leverage biometric authentication such as Face ID and fingerprint recognition, as well as PIN-based verification.
The change aligns with Microsoft’s stated commitment to advancing security standards. Existing users of Microsoft Authenticator—a dedicated authentication app already widely used for Xbox account security—will not be affected by the transition, as the app will continue to function normally. The SMS method is specifically being phased out, meaning it will no longer be available as an authentication or account recovery option.
This represents a broader industry shift away from SMS-based two-factor authentication toward passwordless and biometric-based security methods, which are generally considered more resistant to certain attack vectors such as SIM swapping and phone number spoofing.