No Access to Authenticator/2FA

Question

Hello,

I am currently signed OUT of my work/school administrative account on my computer, and I am unable to sign in on any other device.

I recently reset my phone, which removed my two-factor authentication (2FA) setup. Because of this, I no longer have access to the authentication method required to complete sign-in or make security changes.

The issue is that while I am no longer logged into my account on my computer, any attempt to update my security settings requires 2FA verification, which I cannot complete.

"Verify your identity

Approve a request on my Microsoft Authenticator app

Use a verification code

More information

Are your verification methods current? Check at https://aka.ms/mfasetup"

Could you please help me regain access to my account or update my security settings so I can set up a new 2FA method? The only access I still have is the alternative email.

I can provide any necessary information to verify my identity.

Thank you for your assistance. Moved from Outlook | Web | Outlook.com | Account management, security, and privacy

Answer 1

Dear @Heart Lake United Church,

Thank you for posting your question in the Microsoft Q&A forum.

Based on your description, you are signed out of your work/school admin account and unable to sign in on any device because your phone reset removed your 2FA setup. Since updating security settings also requires 2FA, you’re currently blocked from signing in or making changes.

As you mentioned that you are the Global Administrator and you are completely locked out from the tenant. You might need to contact Microsoft Support team via phone service number: Customer service phone numbers - Microsoft Support. The agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team who could help you to regain access.   

To help you navigate the automated phone system (IVR), here's an example of what the conversation might look like:

IVR: What kind of problem are you worried about?

You: Admin account locked

IVR: What kind of product do you use?

You: Office 365 for business

IVR: Does it count for education or business?

You: For Business

IVR: Are you an admin?

You: Yes

IVR: Do you have another administrator in your organization?

You: No

IVR: Need a service request?

You: Yes

This should help you connect with a live support agent who can help you directly.

If you can't create a support ticket during the call, I recommend creating a temporary tenant account and submitting the support request from there. To create a new tenant, follow these steps:

1. Visit Office 365 E3 - Enterprise Collaboration and Productivity | Microsoft    
2. Select any plan and click Try for free.    
3. Complete the setup to create a new tenant.    
4. Ticket support: In the Microsoft 365 admin center>support>help & support. You can create a support ticket: https://admin.microsoft.com/#/support/requests     

Important: Please remember to cancel the trial subscription once your issue is resolved to avoid any charges.    

I hope information above meet your expectations, if you have any other questions, feel free to reach out.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Because the phone reset removed the existing 2FA method, the only way to regain full access is to use alternative verification or have the 2FA methods reset, depending on whether this is a personal Microsoft account (Outlook.com/Hotmail) or a work/school account.

For a personal Outlook.com / Hotmail Microsoft account:

1. While still signed in on the computer, go to the Microsoft account security page and try to manage security info.
2. When prompted for 2FA, select I don't have any of these if that option appears. This starts an alternative recovery process that does not require the lost authenticator.
3. Follow the prompts carefully and provide all requested information. If recovery succeeds, add new security info (phone, email, Authenticator app) and avoid removing all existing methods at once, or the account may be restricted for 30 days.
4. If the account cannot be recovered because 2FA is enforced and no method is available, the only supported path is the automated account recovery form referenced from I can't sign in to my Microsoft account.

For a work or school account (Microsoft Entra / Azure AD):

1. On the sign-in prompt where 2FA is requested, choose Sign in another way if it is available, and use any alternative method previously configured (SMS, phone call, etc.).
2. If no alternative method is configured and the account is a work/school account, contact the organization’s IT help desk or global admin and request an MFA reset. Admins can clear MFA settings so that registration is required again, allowing configuration of a new method.
3. If repeated attempts have locked sign-in, wait for the lockout to clear and then retry with the new or alternative method.

If none of the above options are available (no alternative methods, no admin who can reset MFA, and the automated recovery fails), there is no supported way in the provided guidance to bypass 2FA or manually override it; recovery depends on those official flows.

---

References:

• I can't sign in to my Microsoft account
• Common problems with two-step verification for a work or school account
• Use a screen reader to set up and troubleshoot multifactor authentication
• I need to reset my mfa methods - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Can't sign in to my email - Microsoft Q&A