Lost access to Admin account

Question

I run a small business and I am the admin to our account. Somehow the Authenticator app is no longer allowing me MFA for my admin account, so I can no longer access my admin portal to add users, change my payment method, etc. Unfortunately, my account wasn't set up with a text or voice code as a backup, so I cannot access it. I need help getting the Authenticator back on line for this account. This was done once before, Dec 2024, but it's happened again.

Thank you.

Answer 1

Dear @Kurt Emshousen,

Good day! Welcome to Microsoft Q&A forum!

Based on your description, I understand that you’ve lost access to your Microsoft admin account because the Authenticator app is no longer providing MFA codes. Since your account wasn’t set up with backup verification options like text or voice calls, you’re currently unable to sign in to the admin portal to manage users or update your payment method. You’re looking for help restoring access to your Authenticator.

I sincerely apologize for the inconvenience caused by this issue.

• May I ask if you are the only Admin or there are other Admins in your organization? 

If you're an admin, please check to see if there are other IT admins in your organization who can help you with the Multi-Factor Authentication (MFA) reset.  

If you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to verify identity and regain access to administrator accounts.  

Please note that we have no control over user accounts, especially when it comes to logging in to your account, resetting your password, changing your access, etc.  

Therefore, if you are the only administrator in your organization, then you need to involve Microsoft Data Protection Team. Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support (Scroll down for Business users)  

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.  

Answer: Authenticator.  

A: What products do you use?  

B: Office 365 for business.  

Verification: Education or company account?  

B: For companies  

A: Are you an administrator?  

B: Yes.  

A: Are there any other administrators in your organization?  

B: No.  

A: I need one.... Service request?  

B: Yes  

(Important Note: Sometimes, you would hear the computer-generated voice at first, please kindly wait for it to end, and if an agent is available, you would be directed to them and get your support. Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "You can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.) 

As an alternative, you can create a new tenant account and submit your request from there.     

To set up a new tenant, please follow these steps:  

• Visit Compare Office 365 Enterprise Pricing and Plans | Microsoft 365, choose any plan and click try for free to start a free trial.     
• Follow the guided setup process to create a new account for a new tenant.  

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In the ticket's description, you could refer to this message "Hello,

I am currently locked out of my Microsoft 365 tenant because multi-factor authentication is enforced, and I am unable to complete the verification process. I am the only global administrator for this tenant, which means I cannot access my account or the Microsoft 365 Admin Center.

To resolve this, I have created a new tenant and would like to be connected with the Data Protection Team to verify my identity and assist with regaining access. I am available to provide any required documentation or verification to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support. You can raise support ticket at: https://admin.microsoft.com/#/support/requests   

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

Note: After creating the support ticket, please kindly let me know the ticket number so I could also track its process to help you regain access to your account/tenant.

Kindly let me know when there are updates or if you need further assistance. Any updates you’re able to share would be really helpful.

I'm here and happy to help! Thank you for your kindness and patience!

---

If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in [our documentation] to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

Because the Microsoft Authenticator method for the admin account is no longer working and there are no backup methods (SMS/voice), the admin account’s MFA registration must be reset from outside the locked account.

Use the following options based on the situation:

1. If there is another admin in the tenant
   1. Have that admin sign in to the Microsoft Entra / Microsoft 365 admin portal.
   2. Go to the user list and select the locked admin account.
   3. Open Authentication methods.
   4. Choose Require re-register multifactor authentication (or equivalent “reset MFA” option).
   5. Sign in again as the locked admin; it will prompt to set up Microsoft Authenticator from scratch (scan QR code, confirm sign-in, etc.).
2. If there is no other admin (sole Global Admin / small business tenant) In this case, only Microsoft’s Data Protection team can reset the admin’s MFA:
   1. Call Microsoft’s global customer service and support number for the region (see Customer service phone numbers - Microsoft Support in the references below).
   2. When the IVR/bot asks what the problem is, clearly state that this is an Authenticator / MFA issue for an Office 365 or Microsoft 365 for business account.
   3. When asked:
      • Product: answer Office 365 for business or Microsoft 365 for business.
      • Type of account: answer company account.
      • Are you an administrator?: answer Yes.
      • Are there any other administrators?: answer No.
      • Do you need a service request?: answer Yes and ask to be routed to the Data Protection team or Tenant Recovery to reset MFA for the tenant’s only admin.
   4. Be prepared to verify identity and prove ownership of the tenant (they will guide through their verification process). After verification, they can reset the MFA registration so Authenticator can be set up again.
3. If support is hard to reach by phone As a workaround, create a temporary trial Microsoft 365 tenant only to open a support ticket:
   1. Sign up for a Microsoft 365 trial to create a new, separate tenant.
   2. Sign in to the Microsoft 365 Admin Center of this new tenant.
   3. Go to Support → Help & support and open a ticket.
   4. In the ticket, clearly state that:
      • There is a different, existing Microsoft 365 tenant where the admin is locked out.
      • The locked account is the only Global Administrator.
      • MFA is enforced and the only method was Microsoft Authenticator, which is no longer accessible.
      • Request the Data Protection team to perform a tenant admin MFA reset on the original tenant.
   5. After the original tenant issue is resolved, cancel the trial subscription for the temporary tenant to avoid charges.
4. For future prevention once access is restored After the MFA reset and successful sign-in:
   • Add at least one backup method (SMS, voice call, or another Authenticator device) under Security info / Authentication methods.
   • Consider registering multiple methods (Authenticator app on a second device, security key, etc.) so a single device failure does not lock out the admin again.

---

References:

• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• Common problems with two-step verification for a work or school account
• How to add your accounts to Microsoft Authenticator
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A