Microsoft Plans to Remove Entra Accounts from Authenticator on Jailbroken Devices

Microsoft is rolling out a significant security enhancement for its Authenticator app starting February 2026, introducing jailbreak and root detection capabilities that will automatically wipe Microsoft Entra credentials from compromised devices.

This move represents a strategic shift toward strengthening enterprise identity security by preventing unauthorized account access through manipulated mobile platforms.

The upcoming change will apply to both iOS and Android devices, automatically detecting when a device has been jailbroken or rooted processes that bypass built-in security restrictions and grant unauthorized system access.

Once detected, all existing Microsoft Entra credentials stored on these devices will be immediately removed to prevent potential compromise.

Administrators won’t need to configure or control this behavior, as the capability is secure by default.

Understanding the Security Rationale

Jailbroken and rooted devices pose significant risks to enterprise security. When users jailbreak their iPhones or root their Android devices, they remove the security protections that prevent ...