A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Turning on passwordless does not remove all other sign-in methods from the account. A password and additional verification methods are still required for sensitive actions and recovery.
To regain access when the page always shows “security key” but no key is available:
- On the sign-in page, look for an option such as Sign-in options, Other ways to sign in, or similar.
- Choose a different method, for example:
- Microsoft Authenticator notification or code
- SMS/phone call
- Email code
- Password (if still enabled)
- After signing in successfully, review and adjust security methods:
- For a personal Microsoft account: go to Security → Advanced security options and check Ways to prove who you are. Remove methods that are not available anymore (old devices, old keys) and add at least one backup method (phone, email, or app) so that sign-in is not blocked by a single method.
- For a work or school account: go to the Security info page and ensure there is at least one additional method besides passkeys/security keys.
If the account is work or school and no alternative method works and access is completely blocked, contact the organization’s administrator or help desk to reset the authentication methods. If the locked account is the only admin account for a business tenant, the Microsoft Data Protection team must be involved via Microsoft Support to verify identity and reset MFA, as described in the referenced Q&A answers.
If a passkey or security key on a device is no longer valid (for example, an orphaned passkey or a deleted credential), remove that passkey from the device or authenticator and then re-register a new passkey after successfully signing in with another method.
References:
- Troubleshoot signing in with a passkey
- Sign in with a passkey (FIDO2) for your work or school account
- How to go passwordless with your Microsoft account
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A