no backup authentication methods

Question

I am the only global administrator of our Microsoft 365 tenant.

After changing my mobile phone, I lost access to the Microsoft Authenticator app that was previously configured for my admin account. As a result, I am unable to complete MFA and cannot sign in to any Microsoft services, including the admin portal. Unfortunately, I have no backup authentication methods (SMS, email, or alternate Authenticator), so I am completely locked out of the account.

---

Moved from: Microsoft 365 and Office

Answer 1

Please understand that as forum moderators, we do not have the tools or sufficient access to make changes to user accounts, including logging in, resetting passwords, or modifying access rights. For your security, only Microsoft Support can assist with these requests. 

Hello @sara deng,

Thank you for your detailed explanation, and I’m really sorry to hear how much time and effort you’ve already spent trying to recover access to your admin account. I fully understand how frustrating it is to be stuck in the automated support loop.

If you are the only admin, you will need to contact Microsoft’s Data Protection team. This team has the authority and the specific security procedures to verify your identity as the legitimate owner of the account and then reset your MFA settings from their end. Please try to find the related hotline number to call the frontline and let them raise a ticket for you: Customer service phone numbers - Microsoft Support    

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help)       

In some regions you may initially interact with an automated system, so here is an example of how you can answer the prompts to reach the right team more quickly:  

• What kind of problem are you experiencing?          
• Answer: Authenticator          
• What products do you use?          
• Answer: Office 365 for business          
• Is this for an education or company account?          
• Answer: For companies          
• Are you an administrator?          
• Answer: Yes          
• Are there any other administrators in your organization?          
• Answer: No. I am the only admin in my tenant           
• Do you need a... Service request?           
• Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.       

During the call, you will be asked to provide information that verifies your identity and proves ownership of the tenant, such as your organization name, billing information, contact email, phone number, or other subscription‑related details. This is a normal part of the security procedure. 

---

If you are unable to reach a support agent by phone, there is a workaround you might consider: You can register for a new Microsoft 365 tenant by signing up for a trial subscription here: Microsoft 365 Business Plans and Pricing | Microsoft 365    

Once the new tenant is created, you can access the admin center and submit a support ticket from there, requesting to speak with the Data Protection Team on behalf of your original tenant.    

Important notes:     

• This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.    
• The resolution time might be longer as you are contacting support from a different tenant.    
• Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges.  

I hope the information provided helps guide you in the right direction. Although I’m unable to take direct action on your account as a forum moderator, I sincerely hope that the steps and recommendations I’ve shared can support you through the process.  

  

Warm regards, 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

If you are the only global administrator of your Microsoft 365 tenant and have lost access to the Microsoft Authenticator app without any backup authentication methods, you will need to contact Microsoft Support for assistance. Here are the steps you can take:

1. Contact Microsoft Data Protection Support: Since you cannot access the admin portal, you should reach out to Microsoft Support directly. You can find the customer service phone numbers for your region and explain your situation. Make sure to mention that you are the only global administrator and that you are locked out of your account.
2. Provide Necessary Information: When you contact support, be ready to provide details about your account, such as your administrator email address and any relevant information that can help verify your identity.
3. Alternative Method: If you cannot reach support through the phone, consider creating a temporary Microsoft 365 trial tenant. This will allow you to access the admin console of the new tenant and submit a support ticket requesting help for your locked account. However, this method does not provide access to your original tenant's data.
4. Follow Up: After submitting your request, keep an eye on your email for any communication from Microsoft Support regarding your account recovery.

These steps should help you regain access to your Microsoft 365 admin account.

---

References:

• Global Admin Locked out - Microsoft Q&A
• I have a Microsoft business account and I am the admin and the only user registered under this account. I can't log in because I have replaced my phone and the authenticator doesn't work. - Microsoft Q&A