Microsoft Authenticator an absolute disgrace. Locked out of account, so can't get e-mail or pay bill.

Question

Microsoft Authenticator an absolute disgrace. Locked out of account, so can't get e-mail or pay bill.

Nathon Jones 0

Have a client who we recommended get a Microsoft 365 account for their business.

They, unwittingly I suspect, selected to use the Microsoft Authenticator app for authorise their login.

Microsoft Authenticator isn't working - it is just continuingly going round in a loop asking them to enter the verification code from the app.

They've raised this as a ticket with Microsoft support, but aren't getting a reply to their e-mails despite having a case ID.

It's an absolute disgrace as Microsoft have now cancelled their 365 account as they were unable to log in, in order to pay their bill.

What are they supposed to do?

Moved from: Microsoft 365 and Office | Loop | For business

2 answers

Your answer

Answer 1

If your client is locked out of their Microsoft 365 account and unable to access the Microsoft Authenticator app, there are a few steps they can take:

Attempt to Use Alternative Verification Methods: If they have set up multiple verification methods, they should try signing in again and select a different method on the sign-in page. This could include receiving a phone call or text message for authentication.
Check for App Issues: If they are using the Microsoft Authenticator app, ensure that it is properly installed and functioning on their device. Sometimes, third-party security apps may block verification codes, so they might want to disable any such apps temporarily.
Contact Support Again: Since they have already raised a ticket with Microsoft support, it may be beneficial to follow up on that ticket. They can also try reaching out through different support channels, such as phone support, to expedite the resolution.
Emergency Access: If they are the only global admin on the account, they may need to contact the Azure Data Protection team for assistance. This can help them regain access to their account more quickly.
Consider Account Recovery Options: If they are unable to resolve the issue through support, they may need to explore account recovery options that Microsoft provides for situations like this.

It's important for them to act quickly to avoid further complications with their Microsoft 365 account.

References:

Answer 2

Lia V 3,390 Microsoft External Staff Moderator

Hi @Nathon Jones,

Welcome to Microsoft Q&A forum.

Thank you for your message and I’m very sorry for the disruption this has caused your client.

Restoring access requires working with the Data Protection team, as they are the only team authorized to perform MFA resets and administrator account recovery. This process ensures proper identity verification and compliance with security protocols. The team can only be reached through a support ticket, which guarantees secure handling of your case.

Since your client already has an active support ticket, please be assured that their case is in the system and is being handled by the appropriate team. The absence of a recent update typically means the request is still in the processing stage or awaiting the next step in the queue.

The next step involves the Data Protection team conducting internal checks and gathering the necessary information. Once this step is complete, the team will contact your client to verify and confirm that they are the legitimate owner of the tenant. Following successful verification, the case will be escalated to a higher-level team to perform the MFA reset for their account.

Because this process involves multiple layers of security validation, it may take some time to complete. We kindly ask for your patience and understanding, as these measures are essential to protect your organization’s data.

Additionally, please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues, we’ll continue doing our best to support you within the scope of our responsibilities.

I hope this clarifies the process and provides reassurance that the case is progressing. Please feel free to reach out if you have any further questions or need additional assistance in the meantime.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Nathon Jones 0 Reputation points

2025-11-20T11:13:57.1+00:00

The Data Protection team, no-one from Microsoft, are responding to our client's e-mails. Their case ID is PII Removed. Perhaps this could be investigated?
Lia V 3,390 Reputation points Microsoft External Staff Moderator

2025-11-20T21:55:09.2266667+00:00

Hi @Nathon Jones,

Thank you for sharing this concern.

I completely understand how challenging this situation must be for you and your client, especially when they are unable to access their Microsoft 365 account and make payment due to authentication issues.

While raising a support ticket was the right step, I truly empathize with the inconvenience caused by the lack of timely response and the account cancellation. This is not the experience we want for our customers.

To help avoid delays caused by time zone differences or scheduling mismatches, your client can send an email clearly stating the date and time they are available for a support call. This will allow the Data Protection team to arrange the call more efficiently.

I genuinely wish I could assist you further, but as a moderator, I don’t have access to the necessary tools or permissions to dig deeper into this issue. These measures are in place to ensure compliance and protect your organization’s data.

I truly appreciate your patience, understanding, and cooperation throughout this process.
Nathon Jones 0 Reputation points

2025-11-21T12:23:28.3+00:00

There is compliance and protecting an organization’s data, and then there's Microsoft 365 and Microsoft Authenticator. It is truly awful if you only have one administrator on the account, and the app decides not to work. You've no way back in.
Lia V 3,390 Reputation points Microsoft External Staff Moderator

2025-11-21T19:42:23.7733333+00:00
Hi @Nathon Jones,

Thank you for sharing your feedback.

Microsoft enforces MFA for administrators to protect organizational data. However, if there is only one Global Administrator and the MFA method fails, recovery becomes more complex because there is no secondary admin to reset access.

To prevent future lockouts, once access is restored, we strongly recommend the following best practices:

Add at least two Global Administrator accounts, each configured with separate MFA methods for redundancy.

Create emergency “break-glass” accounts that are excluded from Conditional Access policies, secured with strong passwords, and monitored for any sign-in activity.

Enable multiple MFA options for each admin (such as Microsoft Authenticator, SMS, phone call, and FIDO2 security keys) to ensure alternative verification methods are always available.

I truly wish I could do more to resolve this for you. However, as a moderator, I don’t have access to the necessary tools or permissions to make deeper changes. These restrictions are in place to maintain compliance and safeguard your organization’s data.

Thank you so much for your patience and understanding throughout this process and I genuinely appreciate your cooperation.

Share via

Microsoft Authenticator an absolute disgrace. Locked out of account, so can't get e-mail or pay bill.

2 answers

Your answer