Locked out of my personal Azure account due to MFA

Question

Locked out of my personal Azure account due to MFA

Evgeniy Likhtanskiy 20

Hello,

I had 2FA enabled in my personal Azure account with Microsoft Authenticator. After factory reset of the phone, Microsoft Authenticator asks me to re-scan QR code to finish recovery of Azure's 2FA. But I don't have the QR code. And I'm locked out of my personal Azure account - when I try to log in, it suggests me to use Microsoft Authenticator this or that way, and I can't do so. Is there a way to reset 2FA on my personal Azure account and restore my access there?

Rukmini 30,115 Reputation points Microsoft External Staff Moderator

2026-02-25T09:38:57.41+00:00

Hello Evgeniy Likhtanskiy

Please share the details over the private messages so that we can assist you further.

Answer accepted by question author

1 additional answer

Your answer

Rukmini 30,115 Reputation points Microsoft External Staff Moderator

2026-02-25T09:38:57.41+00:00

Hello Evgeniy Likhtanskiy

Please share the details over the private messages so that we can assist you further.

Answer 1

Rukmini 30,115 Microsoft External Staff Moderator

Hello Evgeniy Likhtanskiy,

The issue pertains to a tenant lockout, where no other global admin in the tenant has the necessary permissions to login and make changes in your tenant.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Answer 2

Greg Wilson 0 Microsoft Employee

If you have previously enabled Authenticator backup then you can restore without the QR code. There will be a "Restore from backup" choice if this functionality is available. Also, if you have the 25-digit recovery code you can bypass Authenticator. You can look for the "I don't have either of these" under the "Other ways to sign in". These codes would have been generated ahead of time and not something you can do after you are locked out.

If neither of these are available there is one last thing to try. You can Microsoft Sign-In Helper with Microsoft Support, and if approved, you can then reset your security and re-enroll in MFA. Here is the site:

https://support.microsoft.com/home/contact?linkquery=Help%20me%20sign%20in%20without%20an%20account%20recovery%20code

They will ask some historical questions and verify ownership. All of this is manual and may take some time. Also, approval for this is not guaranteed, they may say no.

Evgeniy Likhtanskiy 20 Reputation points

2026-02-25T08:17:04.6966667+00:00
Thanks for your answer, Gregg.Indeed, I did have backup of my Authenticator, and I did restore from this backup after phone's factory reset. So I see the row, related to Azure 2FA in the Authenticator. But the row says "Action required". And when I click, the only message I get is "Scan the QR code provided by your organization to finish recovering this account", and the only tool available is to remove this account. But it's personal Azure account, and I'm the only user/administrator in it, except for Microsoft itself.I'll give the Microsoft Sign-in Helper a try.

What complicates the thing is that I also have M365 Family account. And I do have access there, I do have access to office.com, to account.microsoft.com, I can log in to support.microsoft.com. It looks like Azure is a little bit different area from all other services, like some organization inside organization, and it has its own 2FA.

I say this because I do have two records in Authenticator:

one row is with Microsoft, and there my email is ******@gmail.com, and it works just fine with all Microsoft-related resources, except for Azure specifically.

another row is just for Azure, it's called "Default Directory", and my "login" there is "myemail_gmail.com#EXT#@myemailgmail.onmicrosoft.com". This login is constructed from my personal email, and this isn't the login that I use for my M365 access. And it looks like some "corporate" thing.
Evgeniy Likhtanskiy 20 Reputation points

2026-02-25T08:32:53.2666667+00:00

It didn't work out.

Azure seems to have a dedicated support team, so I was sent to https://azure.microsoft.com/en-us/support/?msockid=28065c377b01601c370b4a357f01661b, which I can't use as it demands me to log in to Azure portal to submit a ticket, but I can't log in because I'm locked out specifically from Azure portal.

Share via

Locked out of my personal Azure account due to MFA

1 additional answer

Your answer