{"id":6489,"date":"2025-07-02T07:12:21","date_gmt":"2025-07-02T07:12:21","guid":{"rendered":"https:\/\/heliview.com\/digital-identity-trust-belgium\/?p=6489"},"modified":"2025-07-02T07:29:29","modified_gmt":"2025-07-02T07:29:29","slug":"the-end-of-sms-authentication-via-eu-login-a-necessary-shift-towards-stronger-security","status":"publish","type":"post","link":"https:\/\/heliview.com\/digital-identity-trust-belgium\/the-end-of-sms-authentication-via-eu-login-a-necessary-shift-towards-stronger-security\/","title":{"rendered":"The End of SMS Authentication via EU Login: A Necessary Shift Towards Stronger Security"},"content":{"rendered":"
In a decisive move to strengthen digital security, the European Commission has announced that SMS-based authentication via EU Login will be fully phased out by mid-2025<\/strong>. The decision reflects growing concerns over the vulnerabilities of SMS-based multi-factor authentication (MFA), particularly in the context of phishing, SIM-swapping, and social engineering attacks.<\/p>\n This transition is part of a broader EU-wide push towards strong authentication methods<\/strong>, in alignment with the requirements of the eIDAS 2.0 Regulation<\/strong> and the NIS2 Directive<\/strong>.<\/p>\n[\/vc_column_text][vc_separator] Although SMS one-time passwords (OTPs) have long served as a popular second-factor method, their limitations are well-documented \u2014 and increasingly unacceptable in high-assurance environments such as EU institutions.<\/p>\n The European Commission has cited the following key reasons:<\/p>\n EU Login will continue to support more secure and robust authentication mechanisms, including:<\/p>\n These methods offer greater resilience against fraud<\/strong>, ensure cryptographic proof of origin<\/strong>, and often enable selective data disclosure<\/strong>, which supports data protection by design.<\/p>\n[\/vc_column_text][vc_separator] The retirement of SMS-based MFA is more than a technical adjustment; it symbolises a wider shift towards zero-trust architectures, decentralised identity models, and EU-wide interoperability<\/strong>.<\/p>\n For identity architects, CIOs and policy leads, this reinforces the urgency to:<\/p>\n The future of identity is strong, secure, and standards-based. Join us at the Digital Identity & Trust Conference<\/strong> to explore practical approaches to secure authentication, EU compliance, and public\u2013private integration.<\/p>\n Let\u2019s move beyond passwords and codes \u2014 towards trusted, resilient digital identity.<\/p>\n<\/blockquote>\n[\/vc_column_text][vc_separator] [vc_row][vc_column width=”2\/3″][vc_column_text css=””] In a decisive move to strengthen digital security, the European Commission has announced that SMS-based authentication via EU Login will be fully phased out by mid-2025. The decision reflects growing concerns over the vulnerabilities of SMS-based multi-factor authentication (MFA), particularly in the context of phishing, SIM-swapping, and social engineering attacks. This transition […]<\/p>\n","protected":false},"author":23,"featured_media":6490,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[42,43,44],"tags":[],"class_list":["post-6489","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-branche-nieuws-en","category-congres-update-en","category-home-en"],"yoast_head":"\r\n<\/h2>\r\n
Why Is SMS-MFA Being Retired?<\/h3> \r\n <\/div>[vc_column_text css=””]\n
\n
<\/h2>\r\n
What Will Replace SMS?<\/h3> \r\n <\/div>[vc_column_text css=””]\n
\n
<\/h2>\r\n
Strategic Implications<\/h3> \r\n <\/div>[vc_column_text css=””]\n
\n
<\/h2>\r\n
Continue the Dialogue at the Digital Identity & Trust Conference<\/h3> \r\n <\/div>[vc_column_text css=””]\n
\n