Updated September 1, 2026: We have updated the timeline. Thank you for your patience.
What and Why
We are improving the restore experience for device-bound passkeys in the Microsoft Authenticator app on iOS. This update provides a clearer and more guided restore flow when users move to a new device. It also improves user understanding of cross-device sign-in with passkeys. This update is designed to reduce friction during device migration while maintaining strong security protections.
Rollout Schedule
General Availability (Worldwide): Mid-September August 2026 (previously August)
Impact on Your Organization
Who is affected
- Users with iOS devices who use Microsoft Authenticator with passkeys
- Users restoring Authenticator on a new iOS device
Platforms/Services
- iOS
- Microsoft Authenticator
- Microsoft Entra
What will happen
- This change applies to iOS devices only. Android is not included in this release and will be supported later.
- Users with iCloud and iCloud Keychain backup enabled, and passkeys stored on their previous device, will see the updated experience during device restore.
- Users restoring Authenticator on a new device will see an updated restore experience.
- The restore flow will include:
- A new user interface that guides users based on whether they are setting up a new device or restoring from an existing one
- Improved guidance for using Authenticator passkeys with cross-device sign-in
- The feature is enabled by default.
- No changes to existing admin configurations or policies.
Action Required/Recommendations
No action is required.
Consider the following recommendations:
- Inform users about the improved restore experience on iOS devices.
- Update internal helpdesk documentation if you provide guidance for device migration or Authenticator restore scenarios.
Compliance considerations
No compliance considerations identified. Review as appropriate for your organization.