A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because the only second-factor method on the account is Microsoft Authenticator and that device/registration is no longer available, access cannot be restored by self-service. The path depends on whether this is a work/school (Entra ID / Microsoft 365) account and whether there is another admin.
- If this is a work or school account and there is another admin
- Ask the organization’s Microsoft 365 / Entra ID administrator to reset the MFA registration:
- Admin signs in to the Microsoft Entra admin center.
- Go to Users → All users and select the affected user.
- Open Authentication methods.
- Select Require re-register multifactor authentication.
- After this, sign in again; the system will prompt to set up Authenticator (and other methods) from scratch.
- Ask the organization’s Microsoft 365 / Entra ID administrator to reset the MFA registration:
- If this is a work or school account and there is NO other admin (you are the only admin)
- Self-service recovery is not possible; Microsoft must verify identity and reset MFA.
- Call Microsoft Support using the regional Customer service phone numbers and ask to open a ticket with the Data Protection / Tenant Recovery team for an admin locked out by MFA.
- When the IVR asks questions, clearly state:
- The problem is with Authenticator / MFA.
- The product is Office 365 for business / company account.
- You are the administrator and there is no other admin.
- You need a service request to reset MFA for the tenant admin.
- If reaching an agent is difficult, one workaround is to create a temporary Microsoft 365 trial tenant, sign in to its Admin Center, and open a support ticket from there asking the Data Protection team to help with the original tenant. Remember to cancel the trial after the issue is resolved.
- If this is a personal Microsoft account (Outlook/Hotmail/Live)
- The provided material is focused on work/school accounts. For personal accounts, use the standard account recovery and security info reset flows and add new verification methods once access is restored.
Until an admin or Microsoft Support resets the MFA registration, the sign-in loop with Authenticator cannot be bypassed.
References:
- Use a screen reader to set up and troubleshoot multifactor authentication
- Sign in using two-step verification or security info
- Change how you do additional verification
- "We did not receive the expected response" error message when you try to sign in by using Azure Multi-Factor Authentication
- "Account verification system is having trouble" error message when you try to sign in by using a work or school account
- Common problems with two-step verification for a work or school account
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Global Admin Locked out - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A