Phish-Resistant MFA Rollout Planner

Plan a phased rollout of phish-resistant MFA (FIDO2, passkeys, Windows Hello for Business) across your organisation. Get a timeline, communication tips, and phase-by-phase runbook.

Organisation Profile

Size and current MFA maturity.

Total number of users

Current MFA method for most users

Number of admin accounts

Current MFA method for admins

Infrastructure & Readiness

Available technology and organisational readiness.

Do you have Entra ID P1 or P2?

Required for Conditional Access authentication strength policies.

Do you have FIDO2 security keys?

Is Windows Hello for Business deployed?

What proportion of users work remotely?

Change Management

Organisational ability to absorb change.

Security team capacity

Change management maturity