Global admin locked out of Microsoft 365 tenant due to lost Authenticator MFA device

Question

Caught in a loop. Cannot get around MFA to fix. I changed phones a while back. There is an Entra entry but nothing workings. Everything asks for Authenticator but Authenticator never responds.

Answer 1

Hello @Andy Anderson,

There are specific steps to regain access. Since MFA is required and the only registered method was the Microsoft Authenticator app, the administrator will need to reset their MFA settings. If there are no other Global Administrators available to assist, the locked-out admin can contact Microsoft Data Protection Support directly for help. They can verify ownership and assist in resetting the MFA registration.

Additionally, to prevent such situations in the future, it’s advisable for organizations to have at least two Global Admin accounts with distinct credentials and MFA methods. This redundancy can help avoid lockouts due to lost devices or other issues.

Please try to raise a support case oR Microsoft or call up global numbers

---

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.