--- title: "Microsoft: It's Time to Move Away From SMS and Voice-Based MFA" description: Alex Weinert, Microsoft’s Identity Security Director, says it’s now time to move away from SMS and voice MFA security measures. Here are the reasons why. image: https://blog.etech7.com/hubfs/SMS%20and%20voice-based%20MFa.png --- [![ETech 7 Logo](https://blog.etech7.com/hs-fs/hubfs/top-logo-14.png?width=99&name=top-logo-14.png "ETech 7 Logo")](https://www.etech7.com/) [![top-logo-14](https://blog.etech7.com/hs-fs/hubfs/top-logo-14.png?width=99&name=top-logo-14.png "top-logo-14")](https://www.etech7.com/) [![Get A Quote](https://no-cache.hubspot.com/cta/default/153393/8a099f5c-b14e-46fb-b011-a0474d82337f.png)](https://cta-redirect.hubspot.com/cta/redirect/153393/8a099f5c-b14e-46fb-b011-a0474d82337f) [Sales: (212) 997-1202](tel:(212)%20997-1202)[Support](https://app.aiautopilot.ai/etech7) ![menu-img.png](https://blog.etech7.com/hs-fs/hubfs/ETech7-2016/Image/menu-img.png?width=276&name=menu-img.png "menu-img.png") Backed by Certified IT Specialists & Powered by State-Of-The-Art Software. ![placeholder_200x200](https://static.hubspot.com/final/img/content/email-template-images/placeholder_200x200.png "placeholder_200x200") ![ETech 7 New York](https://f.hubspotusercontent40.net/hubfs/153393/ETech%207%20New%20York.png) # Microsoft: It's Time to Move Away From SMS and Voice-Based MFA Find me on: [LinkedIn](https://www.linkedin.com/in/andro-yuson) ![Microsoft urges users to stop using phone-based multi-factor authentication](https://blog.etech7.com/hs-fs/hubfs/Microsoft%20urges%20users%20to%20stop%20using%20phone-based%20multi-factor%20authentication.png?width=600&name=Microsoft%20urges%20users%20to%20stop%20using%20phone-based%20multi-factor%20authentication.png) Last year, we wrote a [blog post](https://blog.etech7.com/microsoft-ensure-online-security-with-multi-factor-authentication) about a Microsoft cybersecurity report that found users who enable multi-factor authentication (MFA) for their accounts will end up blocking 99.9% of automated attacks. Today, as with anything involving technology, that seems to have changed. Alex Weinert, Microsoft’s Identity Security Director, says it’s now time to move away from SMS and voice MFA security measures.    But first, what is MFA?   **What is multi-factor authentication?** Multi-factor authentication is an authentication method of putting layers upon layers of security to an account. You, as a user, would have to provide two or more pieces of evidence to ensure that it’s really you that’s logging in - not just some random automated cyberattack. SearchSecurity defines multi-factor authentication as a method that combines two or more credentials: what the user knows (your password) and what the user has (security token) and what the user is (biometric verification).   While some MFA is still better than no MFA, Weinert says, *“These mechanisms *[SMS and voice] *are based on publicly switched telephone networks (PSTN), and I believe they’re the least secure of the MFA methods available today. That gap will only widen as MFA adoption increases attackers’ interest in breaking these methods and purpose-built authenticators extend their security and usability advantages. Plan your move to passwordless strong auth now – the authenticator app provides an immediate and evolving option.”*   The Microsoft exec also cites several known security issues such as SMS and voice formats not being adaptable. This means that opportunities for security innovations in usability are limited, to say the least. However, Weinert makes it clear that the problem does NOT lie in the practice of using MFA per se. He says he is simply discussing which MFA method to use, not whether to use MFA.   ## **Primarily designed without encryption** Another important security issue surrounding phone-based MFA is that SMS and voice protocols were designed without encryption. Weinert says that both SMS and voice calls are transmitted in clear text which can be easily intercepted by determined attackers. An attacker can simply deploy a software-defined-radio to intercept messages, or a nearby [FEMTO](https://www.pcmag.com/news/black-hat-intercepting-calls-and-cloning-phones-with-femtocells), or use an [SS7 intercept service](https://www.theverge.com/2017/6/13/15794292/ss7-hack-dark-web-tap-phone-texts-cyber-crime) to eavesdrop on the phone traffic.   *“It’s also worth noting that most PSTN systems are backed by online accounts and rich customer support infrastructure. Sadly, customer support agents are vulnerable to charm, coercion, bribery, or extortion. If these social engineering efforts succeed, customer support can provide access to the SMS or voice channel. While social engineering attacks impact email systems as well, the major email systems (e.g. Outlook, Gmail) have a more developed “muscle” for preventing account compromise via their support ecosystems. This leads to everything from message intercept, to call forwarding attacks, to SIM jacking,” *adds Weinert.   ## **So what does this mean for the future of MFA?** Again, some MFA is still better than no MFA. While Weinert warns that SMS and voice MFA are the least secure forms of MFA nowadays, it’s still better than having no MFA at all. In the future, expect the security gap for SMS and voice-based MFA to widen with more and more attackers interested in breaking MFA methods.    ## **The answer? App-based authentication.** The way app-based authenticators work is it grabs codes for your email or social accounts by snapping a QR code. Once the QR code has been read, the app-based authenticator will start generating codes and the service will typically ask you to input the current one to verify that you are the person accessing your account. Some of the most popular examples of app-based authenticators are Microsoft Authenticator and Google Authenticator.    Are you wondering what else you can do to strengthen your cybersecurity measures? Here are some of the questions you could ask yourself about your online security:   - Are your passwords secure? [*Here's a refresher on how to come up with strong passwords.*](https://blog.etech7.com/how-do-i-make-my-passwords-secure-read-this) - Do you need an antivirus software? Should you choose a free or paid option? [*Here's a refresher on the best free and paid antivirus software depending on what you need.*](https://blog.etech7.com/free-vs-paid-the-best-antivirus-software-for-2021) - Are you still using Windows 7? [*Here's why that's a bad idea.*](https://blog.etech7.com/topic/network-security) - Using Microsoft Office 365? [*Be wary of phishing campaigns.*](https://blog.etech7.com/heimdal-security-microsoft-office365-users-targeted-by-phishing-campaigns) - And last but not least, PLEASE use MFA. If you're wondering what MFA is, [*here's a quick guide*](https://blog.etech7.com/microsoft-ensure-online-security-with-multi-factor-authentication). Nothing better than having peace of mind, right? The only way to achieve that is to make sure that you are doing everything you can to secure your stuff. After all, no one wants to get their data stolen, right? by : [Andro Yuson](https://blog.etech7.com/author/andro-yuson) ![Andro Yuson](https://app.hubspot.com/settings/avatar/84c5541a80e4f36a25ffeccfa53b1438) #### Business Growth & Automation Welcome to ETech 7's blog. Here you can find the latest news, advice, and tips on scaling and automating a business by leveraging the power of information technology. Topic - [Managed IT Services ](https://blog.etech7.com/topic/managed-it-services) - [Network Security ](https://blog.etech7.com/topic/network-security) - [managed IT services NYC ](https://blog.etech7.com/topic/managed-it-services-nyc) - [managed IT security ](https://blog.etech7.com/topic/managed-it-security) - [Business IT Support ](https://blog.etech7.com/topic/business-it-support) - [Computer Security ](https://blog.etech7.com/topic/computer-security) - [IT Security New York ](https://blog.etech7.com/topic/it-security-new-york) - [IT security ](https://blog.etech7.com/topic/it-security) Recent Posts - [Cloud Security Threats: Strategies to Prevent Your Biggest Cloud Nightmares](https://blog.etech7.com/cloud-security-threats) - [Gaining a Competitive Edge: Innovative IT Solutions for Your Specific Business Needs](https://blog.etech7.com/gaining-a-competitive-edge-innovative-it-solutions-for-your-specific-business-needs)   - [What is IT Process Automation (ITPA)? [How It Works & Key Benefits]](https://blog.etech7.com/it-process-automation) - [The Pros and Cons of Outsourcing IT Needs to a Managed Service Provider](https://blog.etech7.com/the-pros-and-cons-of-outsourcing-it-needs-to-a-managed-service-provider)   - [Building a Cybersecurity Culture: Incorporating Awareness and Practices into Your Business](https://blog.etech7.com/building-a-cybersecurity-culture-incorporating-awareness-and-practices-into-your-business) - [Why Email Security For Small Businesses Is So Important](https://blog.etech7.com/email-security-small-businesses) [![](https://blog.etech7.com/hs-fs/hubfs/Managed%20IT%20Service%20Provider%20Checklist.webp?width=200&height=49&name=Managed%20IT%20Service%20Provider%20Checklist.webp)](https://music.amazon.ca/podcasts/be33eb03-ea95-4f2b-b533-7ac9aac88314/episodes/0cfcd61a-99cd-4571-8d55-d63e18e8b29e/etech-chat-why-small-business-email-security-is-essential) [![](https://blog.etech7.com/hs-fs/hubfs/apple-podcasts.png?width=200&height=51&name=apple-podcasts.png)](https://podcasts.apple.com/us/podcast/why-small-business-email-security-is-essential/id1731006488?i=1000679767102) - [How to Handle IT Support Tickets Easily Without Compromising Quality Service](https://blog.etech7.com/how-to-handle-it-support-tickets) [![](https://blog.etech7.com/hs-fs/hubfs/Managed%20IT%20Service%20Provider%20Checklist.webp?width=200&height=49&name=Managed%20IT%20Service%20Provider%20Checklist.webp)](https://music.amazon.com/podcasts/be33eb03-ea95-4f2b-b533-7ac9aac88314/episodes/d716c3eb-be6c-4b1e-85f4-2be1f4246712/etech-chat-how-to-handle-it-support-tickets-easily-without-compromising-quality-service) [![](https://blog.etech7.com/hs-fs/hubfs/apple-podcasts.png?width=200&height=51&name=apple-podcasts.png)](https://podcasts.apple.com/us/podcast/how-to-handle-it-support-tickets-easily-without-compromising/id1731006488?i=1000676846157) - [What Are The Primary Benefits of Technology in The Workplace?](https://blog.etech7.com/benefits-technology-workplace/) [![](https://blog.etech7.com/hs-fs/hubfs/Managed%20IT%20Service%20Provider%20Checklist.webp?width=200&height=49&name=Managed%20IT%20Service%20Provider%20Checklist.webp)](https://music.amazon.com/podcasts/be33eb03-ea95-4f2b-b533-7ac9aac88314/episodes/cdd5868c-c01a-4fe1-b54e-060bb30900d0/etech-chat-what-are-the-primary-benefits-of-technology-in-the-workplace) [![](https://blog.etech7.com/hs-fs/hubfs/apple-podcasts.png?width=200&height=51&name=apple-podcasts.png)](https://podcasts.apple.com/us/podcast/what-are-the-primary-benefits-of-technology/id1731006488?i=1000676701038) - [Essential IT Helpdesk Best Practices That Your Support Agents Should Follow](https://blog.etech7.com/it-help-desk-best-practices/) - [Average Cost of IT Support for Small Businesses: A Comprehensive Guide](https://blog.etech7.com/cost-of-it-support-for-small-business/) - [Leveraging AI and Automation in Your IT Infrastructure for Enhanced Operations](https://blog.etech7.com/leveraging-ai-and-automation-in-your-it-infrastructure-for-enhanced-operations) - [7 Common Cloud Migration Challenges You Can Avoid by Planning Ahead](https://blog.etech7.com/cloud-migration-challenges/) - [Leading Change: Effective Management Strategies for IT Infrastructure Upgrades](https://blog.etech7.com/leading-change-effective-management-strategies-for-it-infrastructure-upgrades)   - [How Comparing IT Outsourcing’s Pros & Cons Can Help You Make an Informed Decision](https://blog.etech7.com/benefits-and-risks-of-it-outsourcing/) - [How You Can Avoid The Risks of BYOD While Enjoying Its Benefits | ETech 7](https://blog.etech7.com/risks-of-byod) [![](https://blog.etech7.com/hs-fs/hubfs/Managed%20IT%20Service%20Provider%20Checklist.webp?width=200&height=49&name=Managed%20IT%20Service%20Provider%20Checklist.webp)](https://music.amazon.com/podcasts/be33eb03-ea95-4f2b-b533-7ac9aac88314/etech-chat) [![](https://blog.etech7.com/hs-fs/hubfs/apple-podcasts.png?width=200&height=51&name=apple-podcasts.png)](https://podcasts.apple.com/us/podcast/etech-chat/id1731006488) - [Managed Services vs. Professional Services: Key Differences and Benefits](https://blog.etech7.com/managed-service-vs-professional-service) - [Antivirus vs Endpoint Protection: Which One is Right for Your Business?](https://blog.etech7.com/edr-vs-antivirus) [![Managed IT Services Meaning](https://blog.etech7.com/hs-fs/hubfs/Managed%20IT%20Service%20Provider%20Checklist.webp?height=49&name=Managed%20IT%20Service%20Provider%20Checklist.webp)](https://music.amazon.com/podcasts/be33eb03-ea95-4f2b-b533-7ac9aac88314/episodes/a7eeb384-34dd-4b60-b512-d232b34d4833/etech-chat-edr-vs-antivirus-strengths-weaknesses-and-use-cases) [![What is an IT Managed Services Provider](https://blog.etech7.com/hs-fs/hubfs/apple-podcasts.png?height=49&name=apple-podcasts.png)](https://podcasts.apple.com/us/podcast/edr-vs-antivirus-strengths-weaknesses-and-use-cases/id1731006488?i=1000661080643) - [How Data Breach Insurance Protects Your Business](https://blog.etech7.com/what-is-data-breach-insurance) - [Going Green: Reducing the Environmental Impact of Your IT Infrastructure](https://blog.etech7.com/going-green-reducing-the-environmental-impact-of-your-it-infrastructure) - [Cyber Awareness Training: Empowering Employees to Combat Cyber Threats](https://blog.etech7.com/cyber-security-training-benefits)   ![blog-cta-bg.png](https://blog.etech7.com/hs-fs/hubfs/blog-cta-bg.png?width=293&name=blog-cta-bg.png "blog-cta-bg.png") ###### Need IT Support? [![FREE CONSULTATION](https://no-cache.hubspot.com/cta/default/153393/3f9d51c1-6dd4-4d5c-8467-8447e9f658ae.png)](https://cta-redirect.hubspot.com/cta/redirect/153393/3f9d51c1-6dd4-4d5c-8467-8447e9f658ae) NEED IT SUPPORT? [![FREE CONSULTATION](https://no-cache.hubspot.com/cta/default/153393/3f9d51c1-6dd4-4d5c-8467-8447e9f658ae.png)](https://cta-redirect.hubspot.com/cta/redirect/153393/3f9d51c1-6dd4-4d5c-8467-8447e9f658ae) **Speak With An Expert!** Schedule a Meeting ![meeting-Bg.jpg](https://blog.etech7.com/hs-fs/hubfs/ETech7-2016/Image/meeting-Bg.jpg?width=1903&name=meeting-Bg.jpg "meeting-Bg.jpg") ###### Schedule a Meeting Today ETech 7 ensures business continuity with enterprise solutions Our Offices [Managed IT Services in NYC](https://maps.app.goo.gl/wS1zGE2iyaxxaiZSA) 30 W 47th St #301                                              New York, NY 10036 [(212) 997-1202](tel:(212)%20997-1202) [Managed IT Services in Long Island](https://maps.app.goo.gl/uMJP1Jetjva3nh7S9) 90 Merrick Ave 8th Floor                                          East Meadow, NY 11554 [(212) 997-1202](tel:(212)%20997-1202) [Managed IT Services in Queens](https://maps.app.goo.gl/VSmp2ATwWUqYo1836) 61-43 186th St Suite 1020                      Fresh Meadows, NY 11365 [(212) 997-1202](tel:(212)%20997-1202) About ETech 7 ETech 7 is a **managed IT services** provider dedicated to delivering reliable **managed IT support** and **IT consulting** to a wide range of businesses. Leveraging state of the art software and world class service, ETech 7 strives to provide reliable solutions for your firm's IT needs. Menu Contact us [tel:3473086211](tel:3473086211)Headquarters ETech 7 30 W 47th St #301 New York, NY 10036 - [(212) 997-1202](tel:2129971202) info@etech7.com Follow us - [Facebook**](https://www.facebook.com/etech7/) - [twitter**](https://twitter.com/etech7) - [linkedin**](https://www.linkedin.com/company/etech-7) - [google-plus**](https://www.google.com/search?q=ETech+7+-+NYC+Managed+IT+Services+Company&stick=H4sIAAAAAAAA_-NgU1I1qLCwTDYytUhLTUs1Nk0zMTW2MqgwNkxLtbQ0sDQ0TzMyAjIXsWq6hqQmZyiYK-gq-EU6K_gm5iWmp6YoeIYoBKcWlWUmpxYrOOfnFiTmVQIA1BaA_FUAAAA&hl=en&mat=CWvJ7ub4rfZwElcBqiIDwhwFAl3hZxZHRTn47q6MlEUAiNqNTVN5jNiABUlS4Q_OMpGzP8keIVyTfF0y1-Q7BhInBLMumAyl3k3B8HxSDFguEaWH-MnQ5v8t4UXUa28WVfE&authuser=4) - [instagram-p**](https://www.instagram.com/etech_7/?hl=en) - [yelp**](https://www.yelp.com/biz/etech-7-new-york) ![Dell-Logo.png](https://blog.etech7.com/hs-fs/hubfs/ETech7-2016/Image/Dell-Logo.png?width=68&name=Dell-Logo.png "Dell-Logo.png") ![business-partner.png](https://blog.etech7.com/hs-fs/hubfs/ETech7-2016/Image/business-partner.png?width=86&name=business-partner.png "business-partner.png") ![microsoft-partner.png](https://blog.etech7.com/hs-fs/hubfs/ETech7-2016/Image/microsoft-partner.png?width=224&name=microsoft-partner.png "microsoft-partner.png") ![intel-Logo.png](https://blog.etech7.com/hs-fs/hubfs/ETech7-2016/Image/intel-Logo.png?width=72&name=intel-Logo.png "intel-Logo.png") ![Market-Partner.png](https://blog.etech7.com/hs-fs/hubfs/ETech7-2016/Image/Market-Partner.png?width=77&name=Market-Partner.png "Market-Partner.png") ©2026 ETECH 7 INC ![](https://www.facebook.com/tr?id=1891928874183475&ev=PageView&noscript=1) ```json { "@context" : "http://schema.org", "@id" : "https://www.etech7.com/#organization", "@type" : "Organization", "additionalType" : "https://www.wikidata.org/wiki/Q1813651", "areaServed" : [ "https://www.wikidata.org/wiki/Q2925063", "https://www.wikidata.org/wiki/Q7572166", "https://www.wikidata.org/wiki/Q62201", "https://www.wikidata.org/wiki/Q6397898", "https://www.wikidata.org/wiki/Q62291", "https://www.wikidata.org/wiki/Q3310624", "https://www.wikidata.org/wiki/Q5881588", "https://www.wikidata.org/wiki/Q1408", "https://www.wikidata.org/wiki/Q779", "https://www.wikidata.org/wiki/Q18419", "https://www.wikidata.org/wiki/Q1384", "https://www.wikidata.org/wiki/Q739452", "https://www.wikidata.org/wiki/Q54064", "https://www.wikidata.org/wiki/Q18432", "https://www.wikidata.org/wiki/Q1453617", "https://www.wikidata.org/wiki/Q189074", "https://www.wikidata.org/wiki/Q855974", "https://www.wikidata.org/wiki/Q866332", "https://www.wikidata.org/wiki/Q11299", "https://www.wikidata.org/wiki/Q429687", "https://www.wikidata.org/wiki/Q11249", "https://www.wikidata.org/wiki/Q1050048", "https://www.wikidata.org/wiki/Q748485", "https://www.wikidata.org/wiki/Q18438" ], "contactPoint" : { "@type" : "ContactPoint", "areaServed" : [ "https://www.wikidata.org/wiki/Q2925063", "https://www.wikidata.org/wiki/Q7572166", "https://www.wikidata.org/wiki/Q62201", "https://www.wikidata.org/wiki/Q6397898", "https://www.wikidata.org/wiki/Q62291", "https://www.wikidata.org/wiki/Q3310624", "https://www.wikidata.org/wiki/Q5881588", "https://www.wikidata.org/wiki/Q1408", "https://www.wikidata.org/wiki/Q779", "https://www.wikidata.org/wiki/Q18419", "https://www.wikidata.org/wiki/Q1384", "https://www.wikidata.org/wiki/Q739452", "https://www.wikidata.org/wiki/Q54064", "https://www.wikidata.org/wiki/Q18432", "https://www.wikidata.org/wiki/Q1453617", "https://www.wikidata.org/wiki/Q189074", "https://www.wikidata.org/wiki/Q855974", "https://www.wikidata.org/wiki/Q866332", "https://www.wikidata.org/wiki/Q11299", "https://www.wikidata.org/wiki/Q429687", "https://www.wikidata.org/wiki/Q11249", "https://www.wikidata.org/wiki/Q1050048", "https://www.wikidata.org/wiki/Q748485", "https://www.wikidata.org/wiki/Q18438" ], "contactType" : "customer service", "telephone" : "+15162593372" }, "description" : "ETech 7 is a managed IT services provider in NYC dedicated to delivering reliable managed IT support and IT consulting to a wide range of businesses. Leveraging state of the art software and world class service, ETech 7 strives to provide reliable solutions for your firm's IT needs. Any business of meaningful size needs computer networking, backup and disaster recovery. ETech 7 allows companies to outsource professional setup, routine maintenance, emergency assistance, and project development.", "founder" : { "@type" : "Person", "alumniOf" : { "@type" : "EducationalOrganization", "name" : "Baruch College", "sameAs" : [ "https://www.wikidata.org/wiki/Q809633", "https://maps.app.goo.gl/eZXb1H3HLVKwwsi28", "https://www.linkedin.com/school/baruch-college/" ] }, "knowsAbout" : "https://www.wikidata.org/wiki/Q1813651", "name" : "Emil Isanov", "sameAs" : [ "https://www.linkedin.com/in/emilisanov/", "https://www.crunchbase.com/person/emil-isanov" ] }, "foundingDate" : "2012", "logo" : "https://www.etech7.com/hs-fs/hubfs/top-logo-14.png?width=198&name=top-logo-14.png", "name" : "ETech 7", "sameAs" : [ "https://www.facebook.com/etech7/", "https://www.linkedin.com/company/etech-7", "https://twitter.com/etech7", "https://www.pinterest.com/pin/532691462145336130/", "https://www.yelp.com/biz/etech-7-new-york", "https://www.zoominfo.com/c/etech-7-inc/346511268", "https://www.crunchbase.com/organization/etech-2", "https://clutch.co/profile/etech-7", "https://maps.app.goo.gl/LYNtLaZCWozXo34j9", "https://maps.app.goo.gl/kvN6VL7f3hCKDdsu6", "https://maps.app.goo.gl/eM33iMFzcwJ9kB3c6" ], "url" : "https://www.etech7.com/" } ```