KalioTek Blog

Microsoft is ending support for SMS and voice multi-factor authentication in Entra ID, replacing them with phishing-resistant passkeys. Relying on phone codes already exposes your organization to interception and SIM-swapping risks. Preparing your business now ensures uninterrupted sign-ins and protects your shared operational resilience.

Consider the heavy vaults of 19th-century London. To open them, a single key wouldn't cut it—bankers engineered a "two-man rule" requiring two distinct keys held by two separate officers to turn the lock simultaneously. Builders knew that if a single lock or outer wall failed, a secondary barrier was the only thing standing between safety and total collapse.

Even so, fast-forward to today and many businesses are still relying on the electronic equivalent of a simple wooden latch: a lone password.

You’ve probably heard a lot of password advice over the past decade, but how much of it is actually good advice that you should listen to? These days, with advanced automated threats able to crack incredibly complex passwords with ease, you can’t be too careful. You might even need to take a different approach entirely… which brings us to the OG password advice: just make it longer.