CANNOT ACCESS MICROSOFT AUTHENTICATOR

Question

The account requires Microsoft Authenticator approval, but I cannot access Authenticator. All recovery pages also require MFA.

Answer 1

Dear @Carlos,

If you are an end-user: Please contact your IT Administrator for further assistance. How do I find my Microsoft 365 admin? - Microsoft Support

If you are a Global Administrator of your tenant:

Option 1: You may need to contact the Data Protection Team at the service phone number via this link: Customer service phone numbers - Microsoft Support.

The main objective is to go through the IVR (automated system) until you reach a live agent and emphasize this very important security factor. Please help me try this script below, this is a commonly used script for authentication issues to bypass IVR, but you can try to see if it helps get through the system. Please help me to speak loudly, only keywords, clearly and patiently waiting for the machine's response. First, when you call the hotline, they will ask you what kind of problem you are facing with.

Answer: Authenticator.
A: What products do you use?
B: Office 365 for business.
Verification: Education or corporate account?
B: For companies
A: Are you an administrator?
B: Yes.
A: Are there other administrators in your organization?
B: No.
A: I need one.... Service request?
B: Yes

When you speak with a real agent, they can create a ticket for you in the affected tenant and then transfer that ticket to the Data Protection team. Please provide detailed information of your tenant to prove that you own it to the Data Protection Team.

Option 2: Create a new tenant with trial subscription to access and submit a ticket in the Admin Center.

If you still can't get in touch with a real person for help, help me try the following:

Sign up for a free trial (new tenant with trial subscription) of Microsoft 365 at this link: Compare All Microsoft 365 Plans | Microsoft. The goal is to create a temporary tenant with a Global Administrator account so that you can sign in to the Microsoft Admin Center. Once connected, you can submit a support ticket directly to Microsoft. Please remember to cancel the trial subscription once your issue is resolved to avoid unwanted charges.

How to submit support ticket in Admin Center: Get support - Microsoft 365 Admin | Microsoft Learn

Once you contact the Data Protection team, you will be required to provide proof of ownership of the company. This allows them to verify their identity and help reassign the Global Administrator account.

As a moderator, I do not have the tools to investigate your specific account directly, as this is a support forum between users. Moderators and collaborators, including external Microsoft employees, may not directly intervene in the functionality of Microsoft products or access internal systems. Our role is limited to providing technical guidance on reported problems, requests, or ideas. However, I will do my best to guide you as clearly as possible.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Because all sign-in and recovery flows are asking for Microsoft Authenticator and it is not accessible, the next steps depend on whether this is a work/school (business) account and whether there is an administrator who can reset MFA.

1. If this is a work or school (business) account and there is an admin

• Contact the organization’s Microsoft 365/Entra ID administrator.
• Ask the admin to reset MFA so new methods can be registered:
  1. Admin signs in to Microsoft Entra admin center (https://entra.microsoft.com).
  2. Go to Users → All users.
  3. Select the affected user account.
  4. Open Authentication methods.
  5. Select Require re-register multifactor authentication.
• After this, sign in again; the sign-in will prompt to set up Microsoft Authenticator (or other MFA methods) from scratch.

2. If this is a work or school account and there is another Global Admin

• Any other Global Administrator can perform the same Require re-register multifactor authentication steps above for the locked-out user (including another admin).

3. If this is a business account and the locked-out user is the only Global Admin

• Self-service reset is not possible when all flows require MFA and there is no other admin.
• Microsoft’s Data Protection team must verify identity and reset MFA on the tenant.
• Call Microsoft support using the regional Customer service phone numbers - Microsoft Support page referenced in the context.
• When connected to the IVR/agent, clearly state:
  • This is an Office 365/Microsoft 365 for business tenant.
  • The caller is the only Global Administrator.
  • MFA is enforced and the only method was Microsoft Authenticator on a lost/unavailable device.
  • A tenant admin MFA reset / Data Protection / Tenant Recovery is needed.
• Follow the verification process they provide; after they reset MFA, sign-in will allow registering new authentication methods.

4. If sign-in is blocked after many attempts

• If multiple failed MFA/sign-in attempts have been made, Microsoft Entra MFA may temporarily block further attempts.
• Wait before trying again or, once MFA is reset by an admin/support as above, use an alternate MFA method if configured.

5. If this is a personal Microsoft account (Outlook.com, Hotmail, etc.)

• If the issue is specifically that Authenticator backup cannot be restored because the backup account is not accessible, support cannot restore Authenticator credentials.
• Use the Microsoft account sign-in helper to regain access to the Microsoft account itself: Sign-in helper.
• Once account access is restored, re-add the account to Microsoft Authenticator following the “How to add your accounts to Microsoft Authenticator” guidance in the references.

If none of the above paths are available (no admin, no Data Protection contact, no alternate methods, and all flows require MFA), access cannot be recovered through normal self-service and must go through the organization’s admin or Microsoft’s Data Protection support as described.

---

References:

• Restore account credentials from Microsoft Authenticator
• How to add your accounts to Microsoft Authenticator
• Troubleshoot problems with Microsoft Authenticator
• Common problems with two-step verification for a work or school account
• Authentication methods in Microsoft Entra ID - Microsoft Authenticator app
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A

Answer 3

Can you use your Microsoft account recovery code?