Do Son The Microsoft Authenticator AuthMask flaw allowed rogue Android apps to impersonate trusted software and hijack enterprise tokens and passkeys.
Microsoft Authenticator
Microsoft Authenticator will purge Entra ID credentials from jailbroken/rooted devices starting Feb 2026 to block token theft, enforcing security for enterprise accounts.
Microsoft is phasing out password saving and autofill in Authenticator. Saved passwords will sync to Edge starting June 2025. Plan your migration!