Share via

Locked out of Microsoft 365 Admin Account due to Authenticator – All [Moderator note: personal info removed] support numbers not working

Ahmed Abu Taha 5 Reputation points
2026-03-13T19:30:49.84+00:00

Hello,

I am the administrator of my organization, and I am currently completely locked out of my Microsoft 365 admin account.

The issue started after I changed my mobile phone and lost access to the Microsoft Authenticator app. I attempted multiple solutions from the Admin Center to reset the authenticator or recover access, but none of them worked.

Unfortunately, I then clicked "Revoke all sessions", and after that I completely lost access to my email account.

Now every time I try to log in, Microsoft asks for a verification code from the Authenticator app, which I no longer have access to.

Important points:

I cannot access the Authenticator app

I cannot bypass the MFA step

The password reset page also fails when sending verification to my phone

All Microsoft support phone numbers for the [Moderator note: personal info removed] are not working

All Microsoft support services require sign-in, which I cannot do because my account is locked

I urgently need assistance to regain access to my admin account and remove or reset the Authenticator MFA requirement.

This is urgent because I need to pay unpaid invoices for my Microsoft services.

I also tried the password reset page: https://passwordreset.microsoftonline.com/n/passwordreset/#!/

But when I try to verify using my mobile number, it shows an error message.

Please advise on how I can recover access to my admin account.

Thank you.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

3 answers

Sort by: Most helpful
  1. Sumit 43,546 Reputation points Volunteer Moderator
    2026-03-14T03:09:20.9833333+00:00
    0 comments No comments

  2. Kristen-L 12,180 Reputation points Microsoft External Staff Moderator
    2026-03-13T21:14:05.73+00:00

    Hi @Ahmed Abu Taha,

    Thank you for reaching out and providing such a clear overview of the situation. I understand how difficult it is to be locked out of your Microsoft 365 admin account - especially when MFA recovery options aren’t working and urgent billing tasks are pending.

    This situation often happens when MFA needs to be reconfigured - especially after switching to a new phone or reinstalling the Microsoft Authenticator app. Because the new device was never set up with your account, the system is still looking for verification from the Authenticator on your old phone, which is why you can’t receive any codes right now.

    If you are the sole Global Administrator for the tenant, please follow the steps below to complete the account recovery process and regain access. 

    Option 1: Contact Microsoft Data Protection Support by Phone (Primary Method)   

    To regain access to your admin account as you can't access the Admin Portal, you can try reaching out to our Global Customer Service phone to raise a request for resetting your authentication method here: Customer service phone numbers - Microsoft Support. During the call, request to speak to an agent, and share with them every detail related to your query and also mention that you are the only admin lost access to your account. This should allow you to contact the appropriate team so you can solve this incident as soon as possible.  

       

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:        

    In some countries, it is an automated conversation like:  

    IVR: What kind of problem are you concerned about?        

    You: Authenticator.        

    IVR: What kind of product do you use?        

    You: Office 365 for business.        

    IVR confirmation: education or company account?        

    You: For companies        

    IVR: Are you an administrator?        

    You: Yes.        

    IVR: Do you have another administrator in your organization?        

    You: No.        

    IVR: Do you need a... Service request?      

    You: Yes. I need to create a ticket. Please send me direct to the Data Protection Team.   

     

    Option 2: Create a Temporary Account (Trial Tenant) to Submit a Support Ticket (Alternative Method)  

    If you still cannot reach to a live agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.        

     

    Just to clarify, moderators do not have the ability to view or change user account information, so we cannot help with login issues, password resets, or modifying access rights. Even though we cannot access the internal tools required for account‑specific fixes, we are here to support you in every way we can within our scope. 

     

    Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn  

        

    I hope this helps you regain access to your account quickly. Please try the steps and let me know whether they resolve the issue. If the problem persists, we can work together to find a solution.  

    As other users will also search for information in this community, your vote can significantly help those with similar inquiries quickly locate the most relevant resources. 

    Thank you for your kindness and for contributing to the forum.   


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".       

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. Q&A Assist
    2026-03-13T19:31:15.4633333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    Because the account is protected by Microsoft Entra multifactor authentication and there is no access to the Microsoft Authenticator app or other verification methods, the lockout cannot be resolved through self-service tools alone.

    For a work or school (business) tenant where the only global admin is locked out and no other admin can reset MFA, the documented path is to involve Microsoft support and the Data Protection team so they can verify identity and restore access to the administrator account.

    Based on the provided guidance:

    1. If there is any other global admin in the tenant
      • That admin must sign in to the Microsoft Entra admin center and reset MFA for the locked-out account by using Require re-register multifactor authentication so that MFA methods can be configured again on the new phone.
      • Steps for the admin are described here: manage user authentication options and require re-registration of MFA methods.
    2. If there is no other global admin (only one admin in the organization)
      • This is a tenant lockout scenario. In this case, the Data Protection team must be engaged via a Microsoft support ticket.
      • The recommended approach is to contact Microsoft support using the official Customer service phone numbers - Microsoft Support page and explicitly request help with being locked out of the global admin account due to Authenticator/MFA.
      • When reaching phone support (even via automated menus), clearly indicate:
        • The problem is with Authenticator.
        • The product is Office 365 for business.
        • The account is a company (work/school) account, not education.
        • Confirm being the administrator and that there are no other admins.
        • Request creation of a service request and escalation to the Data Protection team for tenant lockout.
      • Be prepared to provide business documentation and tenant details so the Data Protection team can verify identity and ownership before removing or resetting MFA on the admin account.
    3. If regional phone numbers are not working
      • The guidance in similar cases is to still use the Customer service phone numbers - Microsoft Support entry point and work through the available numbers/options for the region, or, if possible, work with a Microsoft partner/reseller:
        • If the Microsoft 365 subscription was obtained through a partner or reseller, that partner’s support organization can open a service request with Microsoft on behalf of the tenant and get the Data Protection team involved.
        • As another workaround used in similar scenarios, an admin can create a separate trial Microsoft 365 tenant, sign in to that new tenant’s admin center, and from there open a support ticket explaining that the real issue is lockout from a different existing tenant where the caller is the only global admin. Support can then route the case to the Data Protection team.
    4. Why self-service options are not sufficient here
      • When all MFA methods are inaccessible and there is no second admin, self-service password reset and normal MFA reset flows cannot override the existing MFA requirement.
      • Microsoft support agents cannot simply bypass security without identity verification; this is why the Data Protection team and a formal support case are required.

    To summarize the actionable path:

    • If any other global admin exists: have that admin sign in and use Require re-register multifactor authentication on the locked-out account.
    • If no other admin exists: use the Customer service phone numbers - Microsoft Support entry point (or a partner/reseller, or a temporary trial tenant) to open a support ticket, explicitly state that this is a tenant lockout / only global admin locked out due to Authenticator, and request escalation to the Data Protection team so they can verify identity and reset/remove MFA on the admin account.

    Once access is restored, configure multiple MFA methods (e.g., Authenticator plus phone/email or security key) to avoid a similar lockout in the future.


    References:

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.