Microsoft is retiring SMS and voice as sign-in methods and making passkeys the default, with the first automatic change landing September 1, 2026. This field guide covers how to inventory your current authentication setup, define a realistic target state, and move between them in the right order — plus a full worked example using the SMS/voice retirement deadlines themselves.