A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The loop occurs when Microsoft Authenticator is the only configured verification method and there is no alternative way to approve sign-in. Getting around the code prompt requires using another verification method or having an admin (or Microsoft support) reset the MFA settings.
Use these options based on the type of account:
- Work or school (Microsoft Entra ID / Microsoft 365 business)
- If any other MFA method is configured (SMS, email, security key, another authenticator app), choose “Other ways to sign in” on the sign-in screen and use that method instead of Authenticator.
- If no alternative method works and this is a business/organization account:
- If there is an IT/admin team: ask an administrator to reset MFA for the account in the Microsoft Entra admin center by using Users → [Your user] → Authentication methods → Require re-register multifactor authentication. After this reset, sign in again and reconfigure Authenticator from scratch on the device.
- If stuck and you are the only admin on the tenant, the documented path is to contact Microsoft support (Data Protection team) via the regional support phone numbers so they can verify identity and reset MFA on the back end. This is the same pattern used in the referenced Q&A threads when admins lose access after a phone change.
- Personal Microsoft account (Outlook.com, Hotmail, etc.)
- If any backup sign-in method is configured (alternate email, phone number, security key), choose that method when prompted instead of Authenticator.
- If no backup method works and Authenticator is the only method, self-service recovery is not possible from the app itself; account recovery must be done through Microsoft’s account recovery and support process as described in the personal-account guidance in the referenced Q&A threads.
If the device with the original Authenticator setup is still available and working, open Authenticator on that original device and approve the sign-in or read the verification code from there. Then add additional sign-in methods (such as SMS or email) so that future device changes do not cause the same loop.
If none of the above is available (no other device, no other MFA method, no admin who can reset MFA), the only supported resolution is to contact Microsoft support (or the organization’s help desk for work/school accounts) and request an MFA reset.
References:
- Common problems with two-step verification for a work or school account
- Troubleshoot problems with Microsoft Authenticator
- Microsoft Authenticator FAQs
- Authentication methods in Microsoft Entra ID - Microsoft Authenticator app
- Authenticator app not sending code to my email - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A