I am the admin to a microsoft business account but cannot access the admin cloud platform due to lost 2FA

Question

Hello, I am writing to seek help with getting back to my account having lost access to my mobile phone where 2FA was configured. I do have login credentials to the alternate email, however, I also cannot access it without 2FA. When I try a different method like a password reset through mobile text, since I still have access to the linked phone number, I get a "Oops! We encountered an unexpected error while contacting you." message.

Please kindly assist in regaining access to my account.

Many thanks in advance.

---

Moved from: Microsoft Security | Microsoft Authenticator

Answer 1

Hi @David Olurebi

Thank you for posting your question in the Microsoft Q&A forum.  

Regarding your issue, may I kindly ask there are other administrator account that you can use to sign in to the Microsoft 365 admin center?

If no other admin account is available and you are the only administrator in the organization and locked out you must contact Microsoft Support for help as they have the required tools and verification procedures to help restore administrative access: Customer service phone numbers.

Please remember to provide them with your account details and explain the situation. Be ready to provide:     

• The company name used during subscription    
• Billing email address (even if it’s a personal Microsoft account)    
• Payment method details (last 4 digits of the card, billing address)    
• Any subscription ID or invoice numbers from billing email    

When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.

To make the process smoother, here’s an example of how to respond when speaking to the automated system (IVR):     

IVR: What kind of problem are you concerned about?     

You:  Authenticator.    

IVR: What kind of product do you use?     

You: Office 365 for business.     

IVR: education or company account?     

You: For companies     

IVR: Are you an administrator?     

You: Yes.     

IVR: Do you have the other administrator in your organization?     

You: No.     

IVR: Do you need a... Service request?     

You: Yes     

These prompts help direct your call to the right support team more quickly, especially when dealing with account lockouts and authentication issues. 

If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Compare All Microsoft 365 Plans. This would allow you to create a new tenant following the provided prompts.    

• Follow the guided setup to create a new Microsoft account and a new tenant.
• This tenant will be completely separate from your existing Microsoft 365 environment.

Once set up, you can access the admin console of the new tenant by logging into admin center and follow the steps in this article: Get support - Microsoft 365 admin and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.    

Include the following details:

• The administrator email address for the locked tenant
• The domain name of the locked tenant
• Any error messages you are seeing
• A description of the authentication or sign‑in issues
• Confirmation that you are the administrator of the locked tenant

Before submitting the ticket, make sure the Support Assistant is turned Off as several customers have reported that when the Support Assistant is enabled, the Contact Support option may not appear.

As shown in the screenshot, simply switch Support Assistant > Off, then enter your issue description. Once disabled, the Contact Support button should appear, allowing you to submit the ticket normally.

Important note:

• This new trial tenant does not provide access to any data, users, or settings from your original locked tenant. It is only intended as a temporary way to contact Microsoft Support.
• Once the issue with your original tenant is resolved, be sure to cancel the trial subscription to avoid any unintended charges. You can do this from the Microsoft 365 Admin Center by going to Billing > Your products and canceling the trial there.

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

As forum moderators, we don’t have access to the detailed system needed to troubleshoot this effectively due to privacy and security constraints. To quickly resolve this and regain access, the most effective step is to contact Microsoft Support Team directly. Only they have the ability to help with your Authenticator issue.    

Hopefully it will help work with your issue and if you have any other questions or need further assistance, feel free to ask.   

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Because access to all configured second-factor methods is lost and sign-in attempts via SMS are failing with an error, recovery depends on whether there is another administrator on the tenant.

1. If there is another global admin in the organization
   • Ask that admin to reset the multifactor authentication (MFA) registration for the affected account in Microsoft Entra ID so new methods can be configured at next sign-in.
   • The admin should follow guidance similar to:
     • Go to the Microsoft Entra admin center.
     • Open Users → select the affected user.
     • Open Authentication methods.
     • Use the option to require re-registration of multifactor authentication so the account can set up Microsoft Authenticator or another method again at next sign-in.
2. If there is no other global admin (only one admin on the tenant)
   • This is a tenant lockout scenario. Only Microsoft’s Data Protection team can restore access.
   • Use the global customer support phone channel to open a Data Protection / tenant recovery case:
     • Call the appropriate number from Customer service phone numbers - Microsoft Support.
     • In the IVR or with the agent, clearly state:
       • The issue is with Authenticator / MFA.
       • The product is Office 365 for business / Microsoft 365 for business.
       • It is a company (work) account.
       • The caller is the only administrator and is locked out due to lost 2FA.
       • A service request is needed and must be routed to the Data Protection team to reset MFA for the tenant admin.
   • Be prepared to provide tenant and identity verification information (admin sign-in name, tenant domain, business details, etc.) as requested by support.
3. If support cannot be reached directly from the locked tenant
   • As an alternative path to reach support, create a temporary trial Microsoft 365 tenant:
     • Sign up for a Microsoft 365 Business/Enterprise trial and complete tenant creation.
     • In the new tenant’s Microsoft 365 admin center, go to Support → Help & support and open a ticket.
     • In the ticket, clearly state that the request is for Data Protection / tenant recovery for a different existing tenant where the only global admin is locked out due to lost MFA.
     • Provide the locked tenant’s admin UPN, tenant domain, and a description of the 2FA issue.
   • This trial tenant is only a channel to contact support; it does not give access to data in the original tenant. Remember to cancel the trial once the original tenant issue is resolved.
4. If this is a work/school account but not the only admin
   • If the account is not the sole global admin, contact the organization’s IT help desk or Microsoft 365 administrator and ask them to:
     • Clear or reset MFA settings for the account so new verification methods can be registered.

Because support agents cannot bypass verification or send codes directly, recovery in a sole-admin lockout always requires working with Microsoft support (Data Protection team) via the official support channels described above.

---

References:

• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
• Common problems with two-step verification for a work or school account
• Use a screen reader to set up and troubleshoot multifactor authentication
• Troubleshoot sign-in issues and account access problems
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Troubleshoot Microsoft verification code issues
• "Account verification system is having trouble" error message when you try to sign in by using a work or school account