MC1179154 – Microsoft Authenticator app: Upcoming changes to jailbreak and root detection

Product:

Entra

Platform:

Android, iOS, Online, World tenant

Status:

Change type:

Feature update, User impact, Admin impact

Links:

Details:

Summary:
Starting February 2026, Microsoft Authenticator will block Entra credentials on jailbroken/rooted iOS and Android devices through a phased rollout: warning, blocking, then wiping credentials. This security feature requires no admin setup. Users on compliant devices remain unaffected. Organizations should notify users and update documentation accordingly.

Details:
[Introduction]
Starting February 2026, we will introduce jailbreak and root detection for Entra credentials in the Microsoft Authenticator app on both iOS and Android platforms. This change enhances security by preventing Entra credentials from functioning on jailbroken/rooted devices. All existing Entra credentials on jailbroken or rooted devices will be wiped to protect your organization. This capability is secure by default and does not require any admin configuration or control.
[When this will happen]
General Availability (Worldwide) rollout begins in February 2026 and is expected to complete in April 2026.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-10-25

updated:
2025-10-25

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

User Access Disruption
Users on jailbroken/rooted devices will be blocked from accessing Entra credentials, leading to potential loss of access to critical applications and services.
   - roles: End Users, Helpdesk Staff
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

Increased Support Tickets
The rollout will likely result in an increase in support tickets as users encounter warnings and blocks, overwhelming helpdesk resources.
   - roles: Helpdesk Staff, IT Support
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

User Experience Degradation
Users will experience a phased disruption in service, starting with warnings and leading to complete blocking, which can frustrate users and impact productivity.
   - roles: End Users, IT Managers
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

Credential Loss
Existing Entra credentials will be wiped from jailbroken/rooted devices, resulting in potential data loss and the need for users to re-register their credentials.
   - roles: End Users, IT Security
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

Documentation Updates Required
Organizations will need to update internal documentation regarding the use of Microsoft Authenticator, which can lead to inconsistencies if not managed properly.
   - roles: IT Managers, Compliance Officers
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

User Education and Awareness Campaign
As the Microsoft Authenticator app will start blocking Entra credentials on jailbroken/rooted devices, there is an opportunity to educate users about the risks of using such devices. A proactive communication strategy can help users understand the importance of device security and encourage them to use compliant devices, thereby improving overall security posture.
   - next-steps: Develop a communication plan that includes emails, webinars, and training sessions to inform users about the changes and the importance of using secure devices. Include best practices for device security and compliance.
   - roles: IT Security Team, HR, Training Coordinators
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

Helpdesk Support Enhancement
With the phased rollout of the new feature, helpdesk staff will need to be prepared to handle increased inquiries from users affected by the new security measures. This is an opportunity to enhance helpdesk training and resources to better support users during the transition.
   - next-steps: Create a helpdesk training module that covers the new feature, potential user issues, and troubleshooting steps. Ensure that helpdesk staff have access to updated documentation and FAQs regarding the changes.
   - roles: Helpdesk Staff, IT Support Managers
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

Documentation and Compliance Review
Updating internal documentation regarding the use of Microsoft Authenticator in relation to Entra credentials will be essential. This presents an opportunity to review and improve existing documentation to ensure clarity and compliance with the new security features.
   - next-steps: Conduct a review of all relevant internal documentation related to Microsoft Authenticator and Entra credentials. Update materials to reflect the new changes and ensure that they are easily accessible to users and staff.
   - roles: IT Administrators, Compliance Officers
   - references: https://support.microsoft.com/account-billing/about-microsoft-authenticator-9783c865-0308-42fb-a519-8cf666fe0acc

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only