Access Denied: Microsoft Authenticator to Purge Entra ID Credentials on Rooted Devices

According to Microsoft’s latest Microsoft Entra ID verification notice, beginning in February 2026 identity authentication for any enterprise will no longer be supported on jailbroken or rooted devices using Microsoft Authenticator. The feature appears to be enabled by default, though enterprise IT administrators may have limited control over its configuration.

Microsoft stated that the move aims to enhance security and prevent scenarios in which compromised devices—through jailbreaking or rooting—could be infected with malware capable of stealing employee authentication tokens. Starting in February 2026, Microsoft Authenticator will automatically detect whether a device has been jailbroken or rooted, and if such modifications are found, the app will immediately purge all Entra ID credentials linked to that device.

This policy update applies to Microsoft Authenticator on both iOS and Android and affects only enterprise or organisational accounts using Microsoft Entra ID; personal Microsoft accounts and third-party logins will remain unaffected.