(Updated) Microsoft Entra: Improved restore experience for Authenticator passkeys on iOS

Updated September 1, 2026: We have updated the timeline. Thank you for your patience.

What and Why

We are improving the restore experience for device-bound passkeys in the Microsoft Authenticator app on iOS. This update provides a clearer and more guided restore flow when users move to a new device. It also improves user understanding of cross-device sign-in with passkeys. This update is designed to reduce friction during device migration while maintaining strong security protections.

Rollout Schedule

General Availability (Worldwide): Mid-September 2026 (previously August)

Impact on Your Organization

Who is affected

• Users with iOS devices who use Microsoft Authenticator with passkeys
• Users restoring Authenticator on a new iOS device

Platforms/Services

• iOS
• Microsoft Authenticator
• Microsoft Entra

What will happen

• This change applies to iOS devices only. Android is not included in this release and will be supported later.
• Users with iCloud and iCloud Keychain backup enabled, and passkeys stored on their previous device, will see the updated experience during device restore.
• Users restoring Authenticator on a new device will see an updated restore experience.
• The restore flow will include:
• The feature is enabled by default.
• No changes to existing admin configurations or policies.

• A new user interface that guides users based on whether they are setting up a new device or restoring from an existing one
• Improved guidance for using Authenticator passkeys with cross-device sign-in

Action Required/Recommendations

No action is required.

Consider the following recommendations:

• Inform users about the improved restore experience on iOS devices.
• Update internal helpdesk documentation if you provide guidance for device migration or Authenticator restore scenarios.

Compliance considerations

No compliance considerations identified. Review as appropriate for your organization.