MC1179154 – M365 Change Digest

One-line summary

Microsoft Authenticator will block and wipe Entra credentials from jailbroken/rooted iOS and Android devices, with phased rollout starting late February 2026 for Android and April for iOS.

Similar updates

Details

Summary

Starting late February 2026, Microsoft Authenticator will detect jailbroken/rooted devices on iOS and Android, blocking Entra credentials on such devices through phased warnings, blocking, and credential wiping. This security feature is automatic with no opt-out. Users on non-jailbroken/rooted devices are unaffected. Notify users and helpdesk accordingly.

Body (from Message Center)

Updated February 24, 2026: We have updated the timeline. Thank you for your patience.

[Introduction]

Starting end of February 2026, we will introduce jailbreak and root detection for Entra credentials in the Microsoft Authenticator app on both iOS and Android platforms. This change enhances security by preventing Entra credentials from functioning on jailbroken/rooted devices. All existing Entra credentials on jailbroken or rooted devices will be wiped to protect your organization. This capability is secure by default and does not require any admin configuration or control.

[When this will happen]

General Availability (Worldwide Android) rollout begins in end of February 2026 and is expected to complete in mid-year 2026 (previously April).

General Availability (Worldwide iOS) rollout begins in April 2026 (previously March) and is expected to complete in mid-year 2026 (previously April).

[How this affects your organization]

Who is affected: All users of Microsoft Authenticator on iOS and Android whose Entra credentials are registered on jailbroken or rooted device. This is going to be a continuous check.

What will happen:

The feature is secure by default and enabled to all customers. There is no opt-out capability..
Users on jailbroken or rooted devices will experience the following phased rollout. An estimated gap between 3 phases is ~ 1 month.
- Phase 1 – Warning Mode: Users receive a warning that their device is jailbroken or rooted and will be blocked in the future (screenshots 1-4):
- Phase 2 – Blocking Mode: Users are blocked from registering Entra credentials or signing in via Authenticator (screenshots 5-8):
- Phase 3 – Wipe Mode: Existing Entra credentials are wiped from jailbroken or rooted devices (screenshots 9-11):
Users on non-Jailbroken or non-rooted devices will not be affected.

[What you can do to prepare]

Notify users about this upcoming change. Users will see error messages or banners in the Authenticator app during warning or blocking phases. These screens are dismissible but indicate the device status.
Communicate to helpdesk staff that Authenticator will become unusable for Entra accounts on jailbroken or rooted devices.
Update internal documentation if you reference Authenticator usage.
No admin action is required to enable or configure this feature.

Learn more: About Microsoft Authenticator | Microsoft Support

[Compliance considerations]

No compliance considerations identified, review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-02-01T00:00:00Z",
    "ai_actions": [
      "Notify users about app restrictions on jailbroken/rooted devices",
      "Update helpdesk and internal documentation"
    ],
    "ai_master_tags": [
      "User",
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Microsoft Authenticator will block and wipe Entra credentials from jailbroken/rooted iOS and Android devices, with phased rollout starting late February 2026 for Android and April for iOS.",
    "ai_topics": [
      "Entra",
      "Authenticator"
    ],
    "category": "planForChange",
    "details_map": {
      "Summary": "Starting late February 2026, Microsoft Authenticator will detect jailbroken/rooted devices on iOS and Android, blocking Entra credentials on such devices through phased warnings, blocking, and credential wiping. This security feature is automatic with no opt-out. Users on non-jailbroken/rooted devices are unaffected. Notify users and helpdesk accordingly."
    },
    "id": "MC1179154",
    "importance": 4,
    "is_major_change": false,
    "last_modified": "2026-02-24T21:53:25Z",
    "ms_products": [
      "Entra"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft Entra"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "Feature update",
      "User impact",
      "Admin impact"
    ],
    "title": "(Updated) Microsoft Authenticator app: Upcoming changes to jailbreak and root detection"
  }
}