ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 15:44 UTC Customize Public modeDiscuss ChangeIntel on Discord
MC1179154 Plan for changeUpdated messageFeature updateUser impactAdmin impact

Microsoft Authenticator app: Upcoming changes to jailbreak and root detection

Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.
Microsoft Entra
Microsoft 365 admin center

Rollout

Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".

Schedule dates changed in the text

Date phrases in schedule sentences differ between the versions this installation saw
  • Seen 24 Feb 2026 May 2026, March 2026, June 2026 → April 2026
  • Seen 22 Jan 2026 February 2026, April 2026 → end of February 2026, May 2026, March 2026, June 2026

Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.

What the notice says

Microsoft’s text, with source markup removed
Updated June 19, 2026: We have updated the content. Thank you for your patience. Introduction Starting end of February 2026, we will introduce jailbreak and root detection for Entra credentials in the Microsoft Authenticator app on both iOS and Android platforms. This change enhances security by preventing Entra credentials from functioning on jailbroken/rooted devices. All existing Entra credentials on jailbroken or rooted devices will be blocked to protect your organization. This capability is secure by default and does not require any admin configuration or control. When this will happen  General Availability (Worldwide Android) rollout begins in end of February 2026 and is expected to complete in mid-year 2026 (previously April). General Availability (Worldwide iOS) rollout begins in April 2026 (previously March) and is expected to complete in mid-year 2026 (previously April). How this affects your organization Who is affected: All users of Microsoft Authenticator on iOS and Android whose Entra credentials are registered on jailbroken or rooted device. This is going to be a continuous check. What will happen: The feature is secure by default and enabled to all customers. There is no opt-out capability.. Users on jailbroken or rooted devices will experience the following phased rollout. An estimated gap between 2 phases is ~ 1 month.Phase 1 – Warning Mode: Users receive a warning that their device is jailbroken or rooted and will be blocked in the future (screenshots 1-4):  Phase 2 – Blocking Mode: Users are blocked from registering Entra credentials or signing in via Authenticator (screenshots 5-8): Users on non-Jailbroken or non-rooted devices will not be affected. What you can do to prepare Notify users about this upcoming change. Users will see error messages or banners in the Authenticator app during warning or blocking phases. These screens are dismissible but indicate the device status. Communicate to helpdesk staff that Authenticator will become unusable for Entra accounts on jailbroken or rooted devices. Update internal documentation if you reference Authenticator usage. No admin action is required to enable or configure this feature. Learn more: About Microsoft Authenticator | Microsoft Support Compliance considerations No compliance considerations identified, review as appropriate for your organization.

What changed

Between archive captures, newest first

  1. Updated February 24,June 19, 2026: We have updated the timeline.content. Thank you for your patience. Introduction Starting end of February 2026, we … devices. All existing Entra credentials on jailbroken or rooted devices will be wipedblocked to protect your organization. This capability is secure by default and does … rooted devices will experience the following phased rollout. An estimated gap between 32 phases is ~ 1 month.Phase 1 – Warning Mode: Users receive a … blocked from registering Entra credentials or signing in via Authenticator (screenshots 5-8): Phase 3 – Wipe Mode: Existing Entra credentials are wiped from jailbroken or rooted devices (screenshots 9-11): Users on non-Jailbroken or non-rooted devices will not be affected. What you …

  2. … any admin configuration or control. When this will happen  General Availability (Worldwide iOS)Android) rollout begins in end of February 2026 and is expected to complete in mid-year 2026 (previously April). General Availability (Worldwide Android)iOS) rollout begins in April 2026 (previously March) and is expected to complete …

  3. Updated January 22,February 24, 2026: We have updated the timeline. Thank you for your patience. Introduction … begins in end of February 2026 and is expected to complete in Maymid-year 2026 (previously April). General Availability (Worldwide Android) rollout begins in MarchApril 2026 (previously February)March) and is expected to complete in Junemid-year 2026 (previously April). How this affects your organization Who is affected: All …

  4. Updated November 11, 2025:January 22, 2026: We have updated the content and the images below. timeline. Thank you for your patience. Introduction Starting end of February 2026, we will introduce jailbreak and root detection for Entra credentials … require any admin configuration or control. When this will happen  General Availability (Worldwide)(Worldwide iOS) rollout begins in end of February 2026 and is expected to complete in April 2026.May 2026 (previously April). General Availability (Worldwide Android) rollout begins in March 2026 (previously February) and is expected to complete in June 2026 (previously April). How this affects your organization Who is affected: All users of Microsoft …

    • Tags Feature update, User impact, Admin impact → Updated message, Feature update, User impact, Admin impact

    Updated November 11, 2025: We have updated the content and the images below. Thank you for your patience. Introduction Starting February 2026, we will introduce jailbreak and root detection for … and Android whose Entra credentials are registered on jailbroken or rooted device. This is going to be a continuous check. What will happen: The feature is secure by default.default and enabled to all customers. There is no opt-out capability.. Users on jailbroken or rooted devices will experience the following phased rollout:Phaserollout. An estimated gap between 3 phases is ~ 1 month.Phase 1 – Warning Mode: Users receive a warning that their device is … are blocked from registering Entra credentials or signing in via Authenticator (screenshots 5-6):5-8): Phase 3 – Wipe Mode: Existing Entra credentials are wiped from jailbroken or rooted devices (screenshots 7-10):9-11): Users on compliant (non-Jailbroken non-Jailbroken or non-rooted)non-rooted devices will not be affected. What you can do to prepare Notify users about this upcoming change. Users will see error messages or banners in the Authenticator app during warning or blocking phases. These screens are dismissible but indicate the device status. Communicate to helpdesk staff that Authenticator will become unusable for Entra accounts …

  6. · first version seen

Linked documentation

Microsoft pages the notice links to

The notice links to no Microsoft Learn or Support page that this installation reads.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 15:44 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.