Authenticator Loops

Question

I have a work account "[name]@[company].onmicrosoft.com". It is my organization, I am the admin and I have no employees. I attempt to login on my computer and it directs me to microsoft authenticator. When I attempt to login to microsoft authenticator it asks for verification from microsoft authenticator which I am not logged into. When I try other ways to login it only asks for codes from microsoft authenticator. I am unable move past this loop. I have uninstalled and reinstalled the app several times and it continues to get stuck in this loop.

---

Moved from: Microsoft Security | Microsoft Authenticator

Answer 1

Hello @rbelcher17, 

Thank you for posting your valuable question on Microsoft Q&A forum.   

I'm very sorry for the inconvenience you’ve experienced, based on the details you shared. May

In this case, you'll need to revoke your MFA access, which will allow you to set up Authenticator again on your next sign-in and then you can access other Microsoft services.  

If you're an admin, please check to see if there are other admin accounts in your organization which can help you with the reset. Then you can follow these steps:    

• Go to Microsoft Entra Admin Center: https://entra.microsoft.com  
• Navigate to Entra ID > Users > All Users.  
• Select your user account.  
• Go to Authentication Methods.  
• Click "Require re-register multifactor authentication".  

  

This will reset your MFA settings. The next time you sign in, you’ll be prompted to set up the Authenticator app again using a QR code.  

If the locked out account is the only administrator in your organization, this request cannot be handled through the Microsoft Q&A forum due to security and privacy limitations. In this case, you will need to contact the Microsoft Data Protection team, as they are the only group authorized and equipped with the necessary tools and verification procedures to confirm your identity and restore administrator access. 

Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

Please carefully follow this instruction to ask for Microsoft Data Protection team support:   

Depending on your country or region. For some countries, when calling the support number, although there are about 30 seconds opening as something "you can visit the link...." But you can ignore this opening and wait until the option, then "1" as a business email user, "1" again for technical help.   

For some countries, it will be an automated conversation like:    

First, when you call the hotline, it asks what kind of problem you are worried about.   

Answered: authenticator.   

A: What kind of product are you using?   

B: Office 365 for business.   

A confirmation: education or company account?   

B: For companies   

A: Are you an administrator?   

B: Yes.   

A: Do you have the other admin in your organization?   

B: No.   

A: You need one.... Service request?   

B: Yes   

If your organization's Office 365 Business/Education subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead.   

Please understand that forum moderators have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc.   

I hope you can successfully revoke your access. If you encounter any difficulties in contacting the frontline support, please feel free to let me know. Thank you and I wish you a great day!  

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Because all sign-in methods on the admin account are locked to Microsoft Authenticator and that app is no longer usable for this account, the loop cannot be broken by reinstalling the app. The MFA registration for the account must be reset from outside the tenant.

Use the following options depending on the situation:

1. If this is a work/school (Microsoft 365 business) account and there is another admin
   • Ask another Global Admin in the tenant to reset MFA:
     1. Go to Microsoft Entra admin center (https://entra.microsoft.com).
     2. Navigate to Users → All users → [your user].
     3. Open Authentication methods.
     4. Select Require re-register multifactor authentication.
     5. Save.
   • Next sign-in will prompt to set up Authenticator again with a new QR code.
2. If this is a work/school account and there is no other admin (only one admin in the tenant)
   • This matches the scenarios in the referenced Q&A threads. In this case, Microsoft’s Data Protection team must reset the admin’s MFA from the backend.
   • Call Microsoft Support using the regional Customer service phone numbers - Microsoft Support entry from the context and request escalation to the Data Protection team for an admin MFA reset.
   • When the IVR/agent asks questions, answer along these lines (as shown in the context):
     • Issue: “Authenticator”
     • Product: “Office 365 for business”
     • Account type: “Company account”
     • Role: “I am the administrator”
     • Other admins: “No, I am the only admin in the organization”
     • Request: “I need to create a service request and speak with the Data Protection team to reset my MFA/authentication methods.”
   • Be prepared to verify identity and tenant ownership. After verification, Data Protection will reset MFA so a fresh sign-in and Authenticator registration can be completed.
3. If support is difficult to reach
   • As described in the context, create a temporary trial tenant only as a channel to open a support ticket:
     1. Sign up for a Microsoft 365 trial tenant.
     2. Go to the new tenant’s Microsoft 365 admin center → Support → Help & support.
     3. Open a ticket clearly stating that access is needed to a different existing tenant where the caller is the only Global Admin and is locked out due to Authenticator-only MFA.
     4. Ask that the case be routed to the Data Protection team for MFA reset on the original tenant.
   • After the original tenant is recovered, cancel the trial tenant to avoid charges.
4. If this is a personal Microsoft account
   • The context provided is focused on work/school (business) accounts and Data Protection–based recovery. For personal accounts, follow the standard account recovery and MFA reset flow via Microsoft’s consumer support, not the business Data Protection path.

Reinstalling Authenticator or trying different devices will not resolve the loop as long as the only registered method is the old Authenticator instance. An admin-side or Data Protection–initiated MFA reset is required.

---

References:

• Troubleshoot problems with Microsoft Authenticator
• Common problems with two-step verification for a work or school account
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Microsoft Authenticator FAQs

AI-generated content may be incorrect. Read our transparency notes for more information.