https://www.theregister.com/2026/03/10/microsoft_authenticator_checks/ # # Sign in / up The Register # # # Topics Security Security All SecurityCyber-crimePatchesResearchCSO (X) Off-Prem Off-Prem All Off-PremEdge + IoTChannelPaaS + IaaSSaaS (X) On-Prem On-Prem All On-PremSystemsStorageNetworksHPCPersonal TechCxOPublic Sector (X) Software Software All SoftwareAI + MLApplicationsDatabasesDevOpsOSesVirtualization (X) Offbeat Offbeat All OffbeatDebatesColumnistsScienceGeek's GuideBOFHLegalBootnotesSite NewsAbout Us (X) Special Features Special Features All Special Features Nvidia GTC Agentic AI The Future of the Datacenter AWS Re:invent SC25 Supercomputing Month Vendor Voice Vendor Voice Vendor Voice All Vendor Voice Rubrik AWS Capgemini Money Movement Hub ZTE Nutanix: Scale Kubernetes. Not Chaos. Amazon Web Services (AWS) New Horizon in Cloud Computing (X) Resources Resources Whitepapers Webinars & Events Newsletters [personalte] Personal Tech 43 comment bubble on white Microsoft Authenticator to nuke Entra creds on rooted and jailbroken phones 43 comment bubble on white Warning, lockout, then wipe if your device trips detection icon Richard Speed Tue 10 Mar 2026 // 13:28 UTC # Microsoft is removing Entra credentials for school and work from jailbroken and rooted devices running iOS and Android. The process is automatic and there is no opt-out. If Microsoft Authenticator detects that a device has been jailbroken or rooted, it will first display a warning, then block access, and finally wipe credentials. The procedure is already underway for Android devices, and iOS devices will follow in April 2026. If all goes to plan, Microsoft will complete the process by July 2026. The app will warn, block, and wipe data "during any interactive operation that involves a work or school account in Microsoft Authenticator." [personalte] There is an argument that an employer should provide employees with suitably locked-down devices anyway, and a jailbroken or rooted device might allow apps to cause all sorts of mischief that could bypass Microsoft's security controls and cause multi-factor authentication (MFA) headaches. * Microsoft 365 confirms new premium tier, stuffed with AI and few discounts * Windows Backup adds second-chance restore at sign-in * Microsoft Azure challenges AWS for downtime crown * Kubernetes kicks down Azure Front Door However, there are also good reasons to use a device - particularly an Android - that qualifies as jailbroken or rooted. There is plenty of software that only works on devices no longer solely part of a given vendor's ecosystem, although it is important to understand the risks involved. After receiving the warning, one user remarked: "Disabling the hardened memory allocator for the app got rid of it having an issue with the device." [personalte] "Microsoft Authenticator is not officially supported on GrapheneOS and Entra accounts may be impacted in the future on devices running GrapheneOS that are detected as rooted," a Microsoft spokesperson said. "Microsoft uses a range of local health and anti-tampering checks to detect rooted or jailbroken devices. As new threats emerge, these protections are continuously updated. To help limit circumvention and maintain effectiveness, Microsoft does not publicly disclose specific detection methods." Microsoft first warned customers last year that the Authocalypse was coming for jailbroken or rooted devices. In response to a post reminding users that the effort was underway, another observer said: "So, the quickest way to clean up tens of M365 accounts that were 'restored' to a new phone (and completely broken) would actually be to root my Pixel?" [personalte] Perhaps not quite what Microsoft had in mind. (r) Get our Tech Resources # Share More about * Android * Authentication * iOS More like these x More about * Android * Authentication * iOS * Microsoft * Multifactor authentication Narrower topics * Active Directory * Azure * Bing * Biometrics * BSoD * Excel * Exchange Server * HoloLens * Internet Explorer * LinkedIn * Microsoft 365 * Microsoft Build * Microsoft Edge * Microsoft Fabric * Microsoft Ignite * Microsoft Office * Microsoft Surface * Microsoft Teams * .NET * Office 365 * OS/2 * Outlook * Patch Tuesday * Pixel * Pluton * SharePoint * Skype * SQL Server * Visual Studio * Visual Studio Code * Windows * Windows 10 * Windows 11 * Windows 7 * Windows 8 * Windows Server * Windows Server 2003 * Windows Server 2008 * Windows Server 2012 * Windows Server 2013 * Windows Server 2016 * Windows Subsystem for Linux * Windows XP * Xbox * Xbox 360 Broader topics * 2FA * Apple * Bill Gates * Google Cloud * Operating System * Security More about # Share 43 comment bubble on white COMMENTS More about * Android * Authentication * iOS More like these x More about * Android * Authentication * iOS * Microsoft * Multifactor authentication Narrower topics * Active Directory * Azure * Bing * Biometrics * BSoD * Excel * Exchange Server * HoloLens * Internet Explorer * LinkedIn * Microsoft 365 * Microsoft Build * Microsoft Edge * Microsoft Fabric * Microsoft Ignite * Microsoft Office * Microsoft Surface * Microsoft Teams * .NET * Office 365 * OS/2 * Outlook * Patch Tuesday * Pixel * Pluton * SharePoint * Skype * SQL Server * Visual Studio * Visual Studio Code * Windows * Windows 10 * Windows 11 * Windows 7 * Windows 8 * Windows Server * Windows Server 2003 * Windows Server 2008 * Windows Server 2012 * Windows Server 2013 * Windows Server 2016 * Windows Subsystem for Linux * Windows XP * Xbox * Xbox 360 Broader topics * 2FA * Apple * Bill Gates * Google Cloud * Operating System * Security TIP US OFF Send us news --------------------------------------------------------------------- Other stories you might like Iran plots 'infrastructure warfare' against US tech giants State news published a list of nearly 30 sites that could be targeted Security11 Mar 2026 | Iran-linked cyber crew says they hit US med-tech firm Meanwhile, Verifone says 'no evidence' to support the digital intruders' claims Cyber-crime11 Mar 2026 | 2 Most chatbots will help plan school shootings and other violence, study shows I see you're trying to kill children. Would you like some help with that? AI + ML11 Mar 2026 | 4 Resilient, continuously active data - with no compromise When the gap between data generation and action is a strategic liability, it's time for a fix Sponsored Feature [personalte] Meta, international cops use handcuffs and AI to stop scammers 150k accounts nuked, 21 suspects arrested Cyber-crime11 Mar 2026 | 6 NASA watchdog report pokes holes in Artemis lunar lander plans Inspector general flags Starship risks and gaps in testing Offbeat11 Mar 2026 | 14 DR-DOS rises again - rebuilt from scratch, not open source Project claims legal clarity and zero legacy code, but offers binaries only OSes11 Mar 2026 | 21 ICO fines Police Scotland over data-sharing debacle in gross misconduct case Blue-on-blue internal investigation lands force PS66k fine Security11 Mar 2026 | 7 Ig Nobel Prize flees US for Switzerland after 35 years over safety concerns This is not satire, but we wish it was Offbeat11 Mar 2026 | 79 Intel finds its Zen undercutting AMD with Arrow Lake refresh Let them eat cores Personal Tech11 Mar 2026 | 12 Ayar Labs taps Wiwynn to cram 1,024 GPUs into a photonic rack system Exclusive Reference design to stitch more than a thousand accelerators into a single enormous server. Systems11 Mar 2026 | 4 Lightmatter says latest photonics will slash datacenter fiber bills in half Latest optical engine may not be CPO, but it's still better than pluggables On-Prem11 Mar 2026 | 1 The Register icon Biting the hand that feeds IT About Us* * Contact us * Advertise with us * Who we are Our Websites* * The Next Platform * DevClass * Blocks and Files Your Privacy* * Cookies Policy * Privacy Policy * Ts & Cs * Do not sell my personal information Situation Publishing Copyright. All rights reserved (c) 1998-2026 no-js