M365 Changelog: (Updated) Introducing Voice One Time Password (OTP)

MC611686 – Updated September 20, 2023: Microsoft has updated the rollout timeline below. Thank you for your patience.

Voice calls have proved to be the least secure authentication method; there are far better ways of performing multifactor authentication (MFA), including Microsoft Authenticator (which offers both MFA and Passwordless options), or more secure phishing-resistant methods like Windows Hello for Business and FIDO2 security keys. Although Microsoft has encouraged everyone to move away from traditional MFA methods (such as SMS and voice), the company understands that some of you are dependent on these methods in order to use MFA. To address this need, Microsoft is

making an improved version of our voice call method available – introducing “voice one-time password (OTP)”. This method will be combined with the SMS authentication method and as such have two delivery methods (SMS and voice OTP) to allow for delivery method optimization.

When this will happen:

Starting September 2023 and completing late October 2023.

How this affects your organization:

Users in your organization who rely on SMS will have this new optimized channel.

What you can do to prepare:

Microsoft encourage users to keep recommending users to use the Microsoft Authenticator app to get an even better user experience.