A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The account is locked behind Microsoft Entra multifactor authentication (MFA) and the only registered method appears to be Microsoft Authenticator, which is no longer usable in the current setup. Self-service recovery will continue to ask for Authenticator codes or other registered methods, so it cannot complete without an alternative method.
To regain access, the following options are supported:
- Use a different MFA method if one is already registered
- If any other method was set up earlier (for example SMS, email code, or another device), sign in using that method instead of the Authenticator app.
- When prompted for verification, choose the option to use a different method and select the available alternative.
- Contact the school/organization IT help desk or administrator
- For a work or school account, if no other method works, the IT administrator must intervene.
- The admin can:
- Review Microsoft Entra sign-in logs to confirm what is happening with the sign-in attempts.
- Reset or clear the MFA settings for the account so that the next sign-in prompts for fresh two-factor registration.
- After the admin clears the settings, sign in again; the system will prompt to re-register Microsoft Authenticator (scan a new QR code and complete setup) or another MFA method.
- If the device with Authenticator is lost or unusable
- When the device used for Authenticator is effectively “lost” from the account’s perspective (for example, sign-out or reset during setup), the supported path is again to:
- Sign in using a different method, or
- Ask the organization’s help desk to clear the two-factor verification settings so registration can be done again on the current phone.
If the school account is managed by the institution, only the organization’s IT/admin team can reset MFA when no usable method remains. Forum moderators and general support cannot bypass verification or send codes.
Once access is restored, it is recommended to:
- Add at least one backup method (such as SMS or email codes) so that losing access to the Authenticator app does not block sign-in in the future.
References:
- Common problems with two-step verification for a work or school account
- Work or school account help
- How to add your accounts to Microsoft Authenticator
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Reset Personal Azure MFA - Microsoft Q&A
- Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A