Back to overview
Maintenance

Microsoft Entra ID - Retirement of Security Questions

Jun 1, 2026 at 8:00am UTC  –  Jun 1, 2026 at 9:00am UTC
Affected services
Software

Resolved
Jun 1, 2026 at 9:00am UTC

Maintenance ended

Created
Jun 1, 2026 at 8:00am UTC

We will be retiring security questions as an option for password reset authentication in Microsoft Entra ID.

This change is being made because security questions are now considered outdated and insecure, and Microsoft has confirmed they will be fully withdrawn as a supported method in the future.

Removing security questions improves account security, reduces the risk of unauthorised access, and aligns the University with modern authentication best practice.

A small number of users who currently rely only on security questions will need to register an alternative authentication method (such as Microsoft Authenticator, SMS, or email). There is no system downtime expected, and affected users will be contacted directly with guidance.