Microsoft 365 passkeys replace SMS MFA with secure cryptographic public-private key pairs. Configure Entra profiles and manage device rollouts.