Microsoft tightens Authenticator checks on Android and iOS

Microsoft is rolling out automatic detection of jailbroken and rooted devices in Microsoft Authenticator, with a three-stage response: warning, access block, then credential wipe for Entra work and school accounts. The process is already active for Android and will extend to iOS in April 2026, completing by July 2026. There is no opt-out. Microsoft has not disclosed the exact detection methods, raising concerns that privacy-focused OSes like GrapheneOS may also be flagged. Some users have found workarounds, such as disabling hardened memory allocators.