Microsoft is removing SMS codes for signing into personal Microsoft accounts, including Xbox accounts.
Soon, you won’t be able to use SMS for login verification or account recovery. Microsoft says the change is for security reasons, as text-message codes are vulnerable to phishing, SIM swaps, and other attacks.
Switch to more secure sign-in methods now, such as:
>Passkeys
>The Microsoft Authenticator app
>A verified backup email address