Immediate MFA Reset & Subscription Renewal Require

Question

I am the only Global Admin for my Microsoft 365 tenant.

My iPhone with Microsoft Authenticator was lost and now I cannot access my account because MFA approval is sent to the old device.

I need to reset MFA to access my admin account and renew my subscription.

Answer 1

Hi @amr khater,

Thank you for posting your question in the Microsoft Q&A forum, and I’m sorry to hear you're having trouble accessing your Global Admin account.

To ensure we resolve this securely, I have initiated a private message for your convenience and left a note there. At your earliest availability, please review that message so I can assist you more affectively.

To access your private messages, sign in to the Q&A forum using the account you used to post your question. Then, navigate to the Private Messages section to view and respond.

Thank you for your attention to this matter. I look forward to your response.

Answer 2

I would like to confirm that I am the only Global Administrator for this Microsoft 365 tenant.

Unfortunately, the only configured MFA method was Microsoft Authenticator on my previous iPhone, which has been lost. Because of this, I am completely locked out of my admin account and cannot access the tenant.

I have the correct username, password, domain information, and all necessary ownership details, but I cannot sign in because the MFA approval is being sent to a device that I no longer have.

I have already attempted to contact Microsoft support several times, but I have not been able to reach a human support agent. All available channels lead to automated responses that do not resolve this situation.

This issue is now seriously impacting my work and business operations, as I urgently need access to manage the tenant and renew the Microsoft 365 subscription.

Since this is clearly a tenant lockout scenario, I kindly request that this case be escalated to the Microsoft Data Protection / Tenant Recovery team so that the MFA registration for my admin account can be reset after ownership verification.

I am fully ready to provide any required verification (domain ownership, tenant details, billing information, company details, etc.).

Additionally, if possible, please provide a direct contact method or official email address for the appropriate Microsoft team so I can follow up and resolve this issue as quickly as possible.

Your urgent assistance would be greatly appreciated.

Answer 3

Because the only registered MFA method was Microsoft Authenticator on a lost phone and there are no other admins, this is a tenant lockout scenario that must be handled by Microsoft’s Data Protection team.

Follow these steps:

1. Confirm there is no other Global Admin
   If any other global administrator exists in the tenant, that admin should:
   • Sign in to the Microsoft Entra admin center (https://entra.microsoft.com).
   • Go to Users > All users and select the locked-out admin account.
   • Open Authentication methods.
   • Select Require re-register multifactor authentication.
     After this, sign in again; the portal will prompt to set up MFA (Authenticator, phone, etc.) from scratch.
2. If truly the only Global Admin (tenant lockout)
   When no other global admin can reset MFA, Microsoft must verify tenant ownership and reset MFA/strong auth on the account:
   • Call Microsoft’s global customer service for business products using the numbers listed under Customer service phone numbers - Microsoft Support.
   • When connected to the IVR/agent, clearly state:
     • This is a Microsoft 365 for business tenant.
     • The caller is the only Global Administrator.
     • Access is blocked because Microsoft Authenticator was on a lost phone and no other MFA methods are configured.
     • A Data Protection / Tenant Recovery or Microsoft 365 Data Protection team is needed to reset MFA / authentication methods for the global admin.
   The frontline agent will create a support ticket and route it to the Data Protection team. That team will perform ownership verification (using tenant and business details) and then clear or reset the MFA registration so sign-in can be completed again.
3. After Microsoft resets MFA
   Once access is restored:
   • Sign in to the admin account.
   • Reconfigure MFA with Microsoft Authenticator and add backup methods (SMS, phone call, security key, etc.) so a single lost device does not cause another lockout.
   • Proceed to the Microsoft 365 admin center to renew the subscription as usual.

If support is difficult to reach, one documented workaround is to create a temporary trial tenant, sign in as its admin, and use that admin center to open a support ticket explicitly requesting Data Protection assistance for the original tenant, as described in the referenced guidance.

---

References:

• Troubleshoot sign-in issues and account access problems
• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• Common problems with two-step verification for a work or school account
• Use a screen reader to set up and troubleshoot multifactor authentication
• Migrate to a new iPhone for work
• Set up multi-factor authentication for Microsoft 365
• I need to reset my mfa methods - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Where can I manage my Microsoft 365 subscription?