Microsoft to enforce MFA for Azure resource management in October

Starting in October, Microsoft will enforce multi-factor authentication (MFA) for all Azure resource management actions to protect Azure clients from unauthorised access attempts. This change, part of the Secure Future Initiative, will be applied gradually across tenants worldwide and requires users to enable MFA on Azure CLI, PowerShell, SDKs, and APIs to safeguard accounts against attacks.

To avoid compatibility issues, users should upgrade Azure CLI to version 2.76 or later and Azure PowerShell to version 14.3 or later. Global administrators who need more time can postpone the enforcement date until July 2026. Starting 1 October 2025, MFA enforcement will gradually begin for accounts signing in to Azure CLI, Azure PowerShell, the Azure mobile app, IaC tools, and REST API endpoints to perform any Create, Update or Delete operation, including automation and scripts using user identities.

According to a Microsoft study, 99.99% of MFA-enabled accounts resist hacking attempts and MFA helps reduce the risk of compromise by 98.56%, even when attackers have stolen credentials.