Global admin locked out due to lost MFA device — need MFA reset.

Question

I am the Global Administrator for our Microsoft 365 tenant and have become locked out of the admin account due to loss of the original Microsoft Authenticator device.

I am messaging from my personal account not business, in oder to raise help.

The phone that previously held the Authenticator app was wiped, and I no longer have access to the registered MFA approval method. When attempting to sign in, the system immediately prompts for Microsoft Authenticator approval, but no notification can be approved because the device is no longer available.

Key points:

I am the Global Admin for the tenant

The original Authenticator device has been wiped

There are no alternative MFA methods available (no SMS, no secondary admin access)

The sign-in process loops back to the Authenticator prompt with no “sign in another way” option

I cannot access the Entra admin center to reset MFA myself

I still have full control of the domain and can verify ownership if required.

I know my email + password.

Request:

Please reset or clear the MFA registration for my Global Admin account so I can sign in and re-register Microsoft Authenticator on a new device.

Happy to complete any identity or domain verification steps needed.

Thank you.

Answer 1

Dear @Ryan Radford, 

Thank you for posting your question in the Microsoft Q&A forum. 

I’m sorry to hear you’re having trouble accessing your admin account because of issues with the Microsoft Authenticator app. Please know that you’re not alone, as many users encounter similar challenges. I am here to guide you through each step so you can regain access and return to work as quickly as possible. 

As part of the community support team, my access is limited and I cannot make changes to administrator-level settings. For security reasons, only Microsoft’s specialized support team has the necessary tools and permissions to assist with account-level issues such as MFA resets or advanced troubleshooting. 

Since you are the sole Global Administrator for the tenant, please follow the steps below to complete the account recovery process and regain access. 

Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)   

To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.  

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:        

In some countries, it is an automated conversation like:  

IVR: What kind of problem are you concerned about?        

You: Authenticator.        

IVR: What kind of product do you use?        

You: Office 365 for business.        

IVR confirmation: education or company account?        

You: For companies        

IVR: Are you an administrator?        

You: Yes.        

IVR: Do you have another administrator in your organization?        

You: No.        

Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)  

If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.        

Follow the guided setup process to create a new account for a new tenant.   

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:   

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.   

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.   

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."   

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support. You can raise support ticket at https://admin.microsoft.com/#/support/requests     

•  Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn 

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues but we’ll continue doing our best to support you within the scope of our responsibilities.    

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you are still unable to reach a live agent after following the steps above.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have any extra questions about this answer, please click "Comment".            

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

To regain access to your Microsoft 365 admin account after losing your MFA device, you will need to contact Microsoft support, specifically the Data Protection team, since you are the only Global Administrator and have no alternative MFA methods available. Here are the steps you can take:

1. Contact Microsoft Support: Use the customer service phone numbers to reach out to Microsoft support. Make sure to explain that you are the Global Administrator and that you have lost access to your MFA method. You can find the relevant support numbers on the Microsoft Support website.
2. Identity Verification: Be prepared to verify your identity and ownership of the domain. This may involve answering security questions or providing information about your account.
3. Request MFA Reset: Clearly state your request for a reset or clearing of the MFA registration for your Global Admin account. This will allow you to sign in and set up the Microsoft Authenticator app on a new device.
4. Follow Up: If you encounter any issues or if the support team requires additional information, be ready to provide it to expedite the process.

Since you are unable to access the Entra admin center to reset MFA yourself, contacting support is the most effective way to resolve this issue.

---

References:

• Global Admin Locked Out - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A