Lost MFA device access and admin access to business account

Question

Dear MS Support,

I am the sole admin of a business account and unfortunately have lost access to the admin center because I don't have access to my old phone, of which the MFA was initially setup on.

Can anyone help to provide guidance on how I may recover the business account. Thank you for the help in advance. Appreciate it.

Best Regards,

Jay

Answer 1

Dear @Jay Kenneth,

I’m sorry to hear you are locked out of your admin account due to lost access to the Microsoft Authenticator app. Since you are the only administrator and cannot authenticate, the best course of action is to contact Microsoft Support directly by phone. You can find the appropriate customer support number here: Customer service phone numbers - Microsoft Support 

Please also note that this forum is a user-to-user support space. Forum moderators do not have access to user accounts and are unable to reset passwords, change authentication methods, or intervene in sign-in issues.

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with. 

Answer: Authenticator. 

A: What products do you use? 

B: Office 365 for business. 

Verification: Education or company account? 

B: For companies 

A: Are you an administrator? 

B: Yes. 

A: Are there any other administrators in your organization? 

B: No. 

A: I need one.... Service request? 

B: Yes 

  If your organization's Office 365 Business subscription is from a partner or reseller, contact the reseller's support provider to help open a service request on behalf of you instead. 

 

If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Compare All Microsoft 365 Plans | Microsoft. This would allow you to create a new tenant following the provided prompts. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.  

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.  

I understand that this entire process can feel long and complicated, and I truly appreciate your patience while working through it. These steps are in place to protect the security of your account, so I hope you can understand why they are required. I sincerely hope you’ll be able to regain access to your account soon. If you need help at any point, or if you have any questions during the process, please feel free to reach out, I’m always here and happy to assist.  

Thank you again for your understanding and patience. 

Warm regards, 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".    

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.   

Answer 2

To recover access as the only admin when the original MFA device is lost, Microsoft must involve the Data Protection team; this cannot be fully self-serviced.

Follow these steps:

1. Confirm no alternative MFA/sign-in method exists
   If there is any other method configured (SMS, office phone, security key, etc.), try signing in and selecting “Sign in another way” on the MFA prompt. If none work, proceed to step 2.
2. Contact Microsoft Support by phone and request Data Protection team
   Because access to the admin center is lost and there are no other admins, the only supported path is via Microsoft’s Data Protection process:
   • Call the appropriate number from Customer service phone numbers - Microsoft Support.
   • When the IVR/automated system answers, follow a flow similar to:
     • State the problem: “Authenticator” or “lost account / can’t pass MFA”.
     • Product: “Office 365 for business”.
     • Account type: “Company account” (not education/personal).
     • When asked if an administrator: “Yes”.
     • When asked if there is another admin: “No”.
     • When asked if a service request is needed: “Yes – I need to create a ticket and speak with the Data Protection team; I am locked out as the only admin.”
   • The frontline agent must open a ticket and route it to the Data Protection team, who have tools and processes to verify identity and reset the admin’s MFA so access to the tenant can be restored.
3. If phone support is hard to reach, create a temporary trial tenant to open a ticket
   As a workaround if a live agent cannot be reached:
   • Sign up for a trial Microsoft 365 tenant (any business/enterprise trial plan).
   • Sign in to the Microsoft 365 Admin Center of this new trial tenant.
   • Go to Help & Support and open a support request. Clearly state:
     • That this is a different, temporary tenant.
     • The domain and admin UPN of the original locked business tenant.
     • That this is a tenant admin MFA lockout and you are the sole global admin.
     • Request escalation to the Data Protection team to reset MFA / restore access on the original tenant.
   • After the original tenant access is restored, cancel the trial subscription on the temporary tenant to avoid charges.
4. What Microsoft will do
   • Data Protection will verify identity and ownership (they may request documentation).
   • Once verified, they can reset MFA or otherwise restore access so the admin can sign in and reconfigure authentication methods.

Because forum moderators and self-service tools cannot override MFA for a sole admin, working with Microsoft Support/Data Protection as above is required.

---

References:

• I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Common problems with two-step verification for a work or school account
• Use a screen reader to set up and troubleshoot multifactor authentication