MC1423108 – M365 Change Digest

One-line summary

Improved and guided restore experience for device-bound passkeys in Microsoft Authenticator on iOS, easing user migration to new devices while maintaining security.

Similar updates

Details

Summary

Microsoft Entra improves the Microsoft Authenticator passkey restore experience on iOS with a clearer, guided flow for device migration, available worldwide in August 2026. It affects iOS users with iCloud backups, is enabled by default, requires no admin changes, and no action is needed.

Body (from Message Center)

[What and Why]

We are improving the restore experience for device-bound passkeys in the Microsoft Authenticator app on iOS. This update provides a clearer and more guided restore flow when users move to a new device. It also improves user understanding of cross-device sign-in with passkeys. This update is designed to reduce friction during device migration while maintaining strong security protections.

[Rollout Schedule]

General Availability (Worldwide): August 2026

[Impact on Your Organization]

Who is affected

Users with iOS devices who use Microsoft Authenticator with passkeys
Users restoring Authenticator on a new iOS device

Platforms/Services

iOS
Microsoft Authenticator
Microsoft Entra

What will happen

This change applies to iOS devices only. Android is not included in this release and will be supported later.
Users with iCloud and iCloud Keychain backup enabled, and passkeys stored on their previous device, will see the updated experience during device restore.
Users restoring Authenticator on a new device will see an updated restore experience.
The restore flow will include:
- A new user interface that guides users based on whether they are setting up a new device or restoring from an existing one
- Improved guidance for using Authenticator passkeys with cross-device sign-in
The feature is enabled by default.
No changes to existing admin configurations or policies.

[Action Required/Recommendations]

No action is required.

Consider the following recommendations:

Inform users about the improved restore experience on iOS devices.
Update internal helpdesk documentation if you provide guidance for device migration or Authenticator restore scenarios.

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-08-01T00:00:00Z",
    "ai_actions": [
      "Inform users about the improved restore experience on iOS devices",
      "Update internal helpdesk documentation for device migration or Authenticator restore scenarios"
    ],
    "ai_master_tags": [
      "User",
      "Admin",
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Improved and guided restore experience for device-bound passkeys in Microsoft Authenticator on iOS, easing user migration to new devices while maintaining security.",
    "ai_topics": [
      "Entra",
      "Authenticator",
      "Ios"
    ],
    "category": "planForChange",
    "details_map": {
      "Summary": "Microsoft Entra improves the Microsoft Authenticator passkey restore experience on iOS with a clearer, guided flow for device migration, available worldwide in August 2026. It affects iOS users with iCloud backups, is enabled by default, requires no admin changes, and no action is needed."
    },
    "id": "MC1423108",
    "importance": 4,
    "is_major_change": false,
    "last_modified": "2026-07-10T22:48:25Z",
    "ms_products": [
      "Entra"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft Entra"
    ],
    "severity": "normal",
    "tags": [
      "Feature update",
      "User impact",
      "Admin impact"
    ],
    "title": "Microsoft Entra: Improved restore experience for Authenticator passkeys on iOS"
  }
}