Original episode on the Hybrid Identity Protection Podcast
I joined Eric Woodruff on the Hybrid Identity Protection Podcast to discuss Microsoft’s shift toward passkeys as the default authentication experience in Entra ID. We covered the September rollout, the announced retirement of Microsoft-provided SMS and voice authentication, and the practical challenges of helping users register stronger credentials.
We also explored registration campaigns, device-bound and synced passkeys, and why weaker fallback methods still need attention after passkeys are introduced. Another important topic was account persistence through attackers registering their own passkeys. The discussion is focused on making stronger authentication work for users and the people supporting them.
