Microsoft is changing the way we all sign in to Microsoft 365. Over the coming months, passkeys will replace passwords and the text-message codes many people use for multi-factor authentication (MFA).
Here at Q6IT, many of our customers already use MFA through the Microsoft Authenticator app, with a text message as a backup. As part of its push for stronger security, Microsoft began making passkeys the default sign-in option in September 2026, and it will soon stop sending text and voice codes altogether.
This plain-English guide explains what passkeys are, why they're better, the key dates for your business and how to set one up.
What is a passkey?
A passkey is a secure digital key that replaces your password and the verification codes sent by text message or phone call, all in one simple step.
Instead of typing a long mix of letters, numbers and symbols, a passkey uses security built into your device or password manager. When you sign in to Microsoft 365, your device confirms it's really you using Face ID, Touch ID, Windows Hello (face recognition or PIN) or the master password for your secure vault.
Why are passkeys better?
Passwords are frustrating, easy to forget, a nuisance to reset and a favourite target for cybercriminals. Passkeys fix all of that:
- They stop phishing. Criminals often build fake sign-in pages to steal passwords and text codes. A passkey only works on the genuine website it was created for. It can't be typed, guessed or handed over to a fake site.
- There's nothing to remember. No more creating, remembering or changing complicated passwords.
- Signing in is quicker. Getting into your account is as quick as unlocking your phone or glancing at your webcam.
When do you need to switch?
Microsoft is retiring its less secure sign-in methods, in particular text message codes and automated phone calls. These are the key dates:
- 1 September 2026 – passkeys become the default. Microsoft 365 now recommends passkeys as the main way to sign in. Anyone still using text or voice codes will see prompts asking them to set up a passkey.
- 1 February 2027 – text and voice codes are retired. Microsoft will stop sending text codes and phone calls for everyday users. Anyone who hasn't set up a passkey or another secure method won't be able to sign in until they do.
- 1 July 2027 – full switch-off. Text and voice sign-in is retired completely, including for IT administrators and guest users.
Setting up passkeys now avoids a last-minute rush and keeps your accounts protected. Q6IT is already helping customers make the move.
Where should you save your passkeys?
A passkey needs a safe place to live. You can keep it on a single phone or computer, but we recommend saving your passkeys in Keeper Password Manager, the business password manager Q6IT supplies and supports.
Why use Keeper for your passkeys?
If your passkey is saved only on your work laptop, signing in from your phone or tablet becomes awkward. Keeping it in Keeper means:
- It works on all your devices. Your passkeys sync securely across Windows, Mac, iPhone, Android and your web browsers.
- It's backed up. If you lose or replace your phone, your passkeys are still safe in your Keeper vault.
- Everything's in one place. Your work passkeys sit alongside your other business passwords, organised and secure.
How to set up a Microsoft passkey with Keeper in 4 steps
It takes less than two minutes. Before you start, make sure the Keeper browser extension is installed and you're signed in to your Keeper vault.
- Open your security settings. Sign in to Microsoft 365, click your profile picture in the top right corner and choose View account. Go to Security info and click Add sign-in method.
- Choose passkey. Select Passkey (FIDO2) from the list and click Add. Microsoft will ask you to confirm who you are using your current sign-in method.
- Save it to Keeper. When the passkey is created, the Keeper extension will pop up and offer to save it to your vault. Click Create Passkey (or Save).
- Confirm and finish. Confirm with your Keeper master password, Touch ID or Windows Hello. Give your passkey a name, such as Microsoft 365 – Work, and save it.
That's it. Next time you sign in to Microsoft 365, Keeper will offer your passkey automatically and sign you straight in, without typing a password.
Need a hand?
Switching to passkeys is one of the most effective things you can do to protect your accounts and your company's data.
If you'd like help setting up passkeys or Keeper for your team, or want us to check your business is ready before Microsoft's deadlines, get in touch with Q6IT. We're happy to help every step of the way.
Further reading from Microsoft: