Microsoft Entra: Improved restore experience for Authenticator passkeys on iOS

What and Why

We are improving the restore experience for device-bound passkeys in the Microsoft Authenticator app on iOS. This update provides a clearer and more guided restore flow when users move to a new device. It also improves user understanding of cross-device sign-in with passkeys. This update is designed to reduce friction during device migration while maintaining strong security protections.

Rollout Schedule

General Availability (Worldwide): August 2026

Impact on Your Organization

Who is affected

• Users with iOS devices who use Microsoft Authenticator with passkeys
• Users restoring Authenticator on a new iOS device

Platforms/Services

• iOS
• Microsoft Authenticator
• Microsoft Entra

What will happen

• This change applies to iOS devices only. Android is not included in this release and will be supported later.
• Users with iCloud and iCloud Keychain backup enabled, and passkeys stored on their previous device, will see the updated experience during device restore.
• Users restoring Authenticator on a new device will see an updated restore experience.
• The restore flow will include:
  • A new user interface that guides users based on whether they are setting up a new device or restoring from an existing one
  • Improved guidance for using Authenticator passkeys with cross-device sign-in
• The feature is enabled by default.
• No changes to existing admin configurations or policies.

Action Required/Recommendations

No action is required.

Consider the following recommendations:

• Inform users about the improved restore experience on iOS devices.
• Update internal helpdesk documentation if you provide guidance for device migration or Authenticator restore scenarios.

Compliance considerations

No compliance considerations identified. Review as appropriate for your organization.