Cannot sign in without Authenticator code. Lost access to Microsoft Authenticator codes.

Question

While trying to help a co worker who did not want to download the Authenticator app, I apparently replaced my authenticator access code for MY work Microsoft admin account with her Microsoft account. Now if cannot sign in and cannot get help to sign in because all of Microsoft's help is centered on being signed in first....which I cannot do.

Answer 1

Hi @Suzie Plate,

Thank you for posting your question in the Microsoft Q&A forum, and I'm sorry to hear that you're having trouble accessing your admin account.

Based on what you’ve shared, it seems that the Microsoft Authenticator app no longer contains the multi‑factor authentication (MFA) registration for the affected admin account. As a result, the sign‑in process requires an approval from the Authenticator app that cannot be completed. This leads to a sign‑in loop and prevents access to the admin account, which also limits the ability to reach Microsoft support through standard signed‑in options.

As part of the community support team, my access is limited and I cannot make changes to administrator-level settings. For security reasons, the options to recover access may vary depending on whether another administrator is available in the organization.

---

Option 1: Contact other IT admins

Please check to see if there are other IT admins in your company who still have access and share with them the steps outlined in the article Manage user authentication methods for Microsoft Entra multifactor authentication. This will help them assist you in resetting your MFA settings and restoring access to the account.

---

Option 2: Contact Microsoft Data Protection Support by phone

(Please proceed with the third option if contacting phone support is not applicable to your situation)

If you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to verify identity and regain access to administrator accounts. You can try reaching out to the Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.

Please note that forum moderators do not have access to user account settings and cannot assist with logging in, resetting passwords, or changing access rights. While we do not have access to internal systems or administrative tools required to resolve account-specific or backend-related issues, we’ll continue doing our best to support you within the scope of our responsibilities.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

IVR: What kind of problem are you concerned about?

You: Authenticator.

A: What products do you use?

B: Office 365 for business.

Verification: Education or company account?

B: For companies

A: Are you an administrator?

B: Yes.

A: Are there any other administrators in your organization?

B: No.

IVR: Do you need a... Service request?

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team.

---

Option 3: Create a new tenant to submit a support ticket (Alternative method)

If you cannot reach a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

To create a support ticket: In the Microsoft 365 admin center > Help & Support.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the only global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

It is important to note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn.

I hope this helps you regain access to your account quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance.

If you find my post useful, kindly consider upvoting it. Doing so can assist others in the community who may have similar questions in finding solutions more quickly.

Thank you for your kindness and contributions to the forum.

---

If the answer is helpful, please click "Accept Answer". If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in this documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Because the admin account is now locked behind Microsoft Authenticator and there is no way to sign in to change the settings, recovery depends on whether there is another admin or alternative sign-in method available.

1. Check for any alternative verification methods
   • If any other MFA method was configured (SMS, phone call, alternate email, security key), use “Sign in another way” on the MFA prompt and choose that method to complete sign-in.
   • Once signed in, update the account’s security info and re-register the Microsoft Authenticator app.
2. If there is another administrator in the tenant
   • Ask that admin to reset MFA for the locked account in Microsoft Entra Admin Center:
     • Go to https://entra.microsoft.com → Users → All users → select the locked admin account → Authentication methods → choose Require re-register multifactor authentication.
   • After this reset, sign in again and set up Authenticator from scratch.
3. If this is the only admin account (sole global admin)
   • This scenario requires Microsoft’s Data Protection team to reset the admin’s MFA from the backend.
   • Call Microsoft’s global support using the Customer service phone numbers page and have a frontline agent open a ticket to the Data Protection team on behalf of the tenant.
     • When the IVR asks what the problem is, clearly state “Authenticator”.
     • When asked which product, answer “Office 365 for business” and confirm it is a company account.
     • Confirm being an administrator and that there is no other administrator.
     • Ask to create a service request and route it to the Data Protection team to reset MFA for the tenant admin.
   • Be prepared to verify identity and tenant ownership (contact details, domain, subscription info, etc.). The Data Protection engineer will then clear or reset MFA so the admin can sign in and reconfigure authentication methods.
4. If support is hard to reach, use a trial tenant as a workaround
   • Create a new Microsoft 365 trial tenant (separate from the locked tenant).
   • Sign in to the new tenant’s Microsoft 365 Admin Center and open Help & support.
   • In the ticket, explain that access is needed to a different existing tenant where the admin is locked out due to Authenticator and there is no other admin.
   • Ask specifically for the case to be escalated to the Data Protection team for MFA reset on the original tenant.
   • After resolution, cancel the trial subscription to avoid charges.

Once MFA is reset and access is restored, add multiple authentication methods (Authenticator, SMS, alternate email, possibly a second admin account) to avoid being locked out again.

---

References:

• Use a screen reader to set up and troubleshoot multifactor authentication
• Troubleshoot sign-in issues and account access problems
• Common problems with two-step verification for a work or school account
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Troubleshoot Microsoft verification code issues