Request for MFA Reset – Lost Access to Admin Account

Question

Dear Microsoft Data Protection Team,

I am writing to request assistance with resetting the Multi-Factor Authentication (MFA) for my Microsoft 365 account.

Unfortunately, my mobile phone was damaged and is no longer usable. The Microsoft Authenticator app that contained my authentication codes was installed on that device. Because the account is a business/organizational account, I am currently unable to complete the sign-in process to restore access using the backup or recovery methods.

As a result, I have completely lost access to the MFA verification required to sign in to my account. I kindly request your assistance in resetting or removing the existing MFA configuration so that I can regain access to my account and set up MFA again on a new device.

I understand that identity verification may be required for security purposes, and I am fully willing to provide any information or documentation needed to confirm account ownership.

Thank you very much for your time and assistance. I look forward to your guidance on how to proceed.

Best regards,

[[Moderator note: personal information removed]@gmail.com / Tenant Admin [Moderator note: personal information removed]@zcgp4.onmicrosoft.com]

---

Moved from: Microsoft Security | Microsoft Authenticator

Answer 1

Dear @Nguyễn Quang,

I’m sorry to hear you’re having trouble signing in after changing your phone. When you replace your device, Microsoft Authenticator does not automatically transfer MFA settings unless you previously enabled cloud backup and restored it on the new phone. 

If your organization has another Global Administrator, that admin can sign in to the Microsoft 365 admin center and reset MFA for your admin account, reconfigure Microsoft Authenticator on your new phone.

Your administrator can follow the guidance in the following article: Manage authentication methods for Microsoft Entra multi-factor authentication

Please also note that this forum is a user-to-user support space. Forum moderators do not have access to user accounts and are unable to reset passwords, change authentication methods, or intervene in sign-in issues.

 

Therefore, if you are the only administrator in your organization, then you need to involve Microsoft data protection team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with. 

Answer: Authenticator. 

A: What products do you use? 

B: Office 365 for business. 

Verification: Education or company account? 

B: For companies 

A: Are you an administrator? 

B: Yes. 

A: Are there any other administrators in your organization? 

B: No. 

A: I need one.... Service request? 

B: Yes 

  If your organization's Office 365 Education subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead. 

 

If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Compare All Microsoft 365 Plans | Microsoft. This would allow you to create a new tenant following the provided prompts. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.  

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.  

I understand that this entire process can feel long and complicated, and I truly appreciate your patience while working through it. These steps are in place to protect the security of your account, so I hope you can understand why they are required. I sincerely hope you’ll be able to regain access to your account soon. If you need help at any point, or if you have any questions during the process, please feel free to reach out, I’m always here and happy to assist.  

Thank you again for your understanding and patience. 

Warm regards, 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".    

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.   

Answer 2

To have Multi-Factor Authentication (MFA) reset for a business/tenant admin account when the only device with Microsoft Authenticator is lost or damaged, direct contact with Microsoft’s Data Protection team is required. This cannot be completed through the portal alone when locked out.

Follow these steps:

1. Call Microsoft customer support for business
   • Use the regional phone number listed under Customer service phone numbers - Microsoft Support.
   • When prompted by the IVR/agent, clearly state that:
     • This is an Office 365/Microsoft 365 for business account.
     • It is a company/organization account, not personal.
     • The caller is the only global admin/tenant admin and has lost access to MFA due to a damaged phone and cannot sign in.
     • A Data Protection team engagement is needed to reset MFA for the tenant admin account.
   Example IVR flow (may vary by region):
   • Problem type: say “Authenticator”.
   • Product: “Office 365 for business”.
   • Account type: “For companies”.
   • Are you an administrator?: “Yes”.
   • Any other admins in the organization?: “No”.
   • Do you need a service request?: “Yes, I need to create a ticket and be transferred to the Data Protection team.”
2. Ask specifically for the Microsoft 365 Data Protection team
   • Request that a ticket be opened with the Data Protection team to:
     • Verify identity as the legitimate tenant admin.
     • Reset or clear MFA / authentication methods on the admin account so that MFA can be re-registered on a new device.
3. Prepare to verify identity and tenant ownership
   • Be ready to provide any documentation or information requested by the Data Protection team (business details, subscription info, domain/tenant details, etc.) so they can confirm ownership before resetting MFA.
4. If unable to reach a suitable agent directly
   • As an alternative, create a temporary new tenant using a trial Microsoft 365 subscription.
   • From that new tenant’s admin center, open a support ticket and request to speak with the Data Protection team on behalf of the original tenant, explaining that the only global admin of the original tenant is locked out due to MFA.

Once the Data Protection team completes their process and resets MFA, sign in again and reconfigure Microsoft Authenticator (or other MFA methods) on the new device.

---

References:

• Troubleshoot sign-in issues and account access problems
• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A