Starting February 2026, Microsoft Authenticator will introduce jailbreak/root detection for work or school accounts. Microsoft states this change is intended to prevent work or school accounts in Authenticator from functioning on jailbroken or rooted devices.
Microsoft also states that this feature does not require any IT admin configuration or control, and that personal accounts are unaffected.
What “jailbroken” or “rooted” means in Authenticator
Microsoft explains that if a mobile device’s operating system has been jailbroken (iOS) or rooted (Android), or otherwise tampered with Microsoft Authenticator may no longer work for work or school accounts.
What happens when Authenticator detects a jailbroken/rooted device
Microsoft states that if Authenticator detects the device is jailbroken or rooted, users will see an error during any interactive operation that involves a work or school account in Microsoft Authenticator.
Microsoft also states that, to protect the organization, all existing work or school accounts will be wiped/removed from Authenticator on a jailbroken/rooted device.
Rollout approach (three phases)
Microsoft states the rollout will occur in three phases and is expected to complete in July 2026:
- Warning mode: Users on jailbroken/rooted devices will see a warning indicating their device is jailbroken/rooted and that they’ll eventually be unable to add or use work or school accounts.
- Blocking mode: Users on jailbroken/rooted devices will see a warning indicating they can no longer add or use a work or school account.
- Wipe mode: Users will see a warning indicating their work or school accounts have been removed from the app.
Scope: what’s affected vs. not affected
Microsoft states this change applies to work or school accounts in Microsoft Authenticator, and that personal accounts are unaffected.
Microsoft also states this feature does not require IT admin configuration or control.
What Microsoft advises users to do
Microsoft directs users who need help removing jailbreak/root modifications or who need help ensuring continued sign-in to contact their organization’s support team.
For more details about this topic, please check the official Microsoft reference: Jailbreak/root detection in Microsoft Authenticator | Microsoft Support
Conclusion
Microsoft Authenticator will begin enforcing jailbreak and root detection for work or school accounts starting in February 2026. This change is automatic, requires no administrator configuration, and is designed to prevent Microsoft Entra ID credentials from being used on jailbroken or rooted devices. Organizations and users should be aware of the phased rollout and ensure work or school authentication occurs only on supported, uncompromised devices.
Did you find this article helpful? Consider showing your appreciation by liking and sharing it. 🙂
Disclaimer: The views expressed in this post are personal and do not represent the opinions of my organization. The provided solution is offered “AS IS” without warranties or guarantees and should be validated in a test environment before deployment in production.
Your suggestions and feedback are invaluable; feel free to leave a comment.
[ ]’s Ulysses Neves
