A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because two-step verification is enabled, signing in requires both the password and a second verification method. If that second factor (for example, Microsoft Authenticator or SMS) is not working, the options depend on the type of account and whether there are other admins.
- If this is a work or school (Microsoft Entra / Microsoft 365 business) account and there is another admin
- Ask an administrator in the organization to reset the multifactor authentication (MFA) settings for the account in the Microsoft Entra admin center. After the reset, sign-in will prompt to set up two-step verification again.
- If this is a work or school account and this is the only admin on the tenant
- Microsoft’s Data Protection team must verify identity and reset the authentication methods.
- Call Microsoft Support using the regional number listed under Customer service phone numbers - Microsoft Support.
- When navigating the phone system, clearly state that this is an Office 365 for business/company account, that this is the administrator account, and that there are no other admins, and request a ticket with the Data Protection team to reset MFA/two-step verification.
- Support will guide through identity verification and, once verified, can reset the MFA configuration so sign-in can be completed and new methods registered.
- If this is a personal Microsoft account (Outlook.com, Hotmail, etc.)
- Use the standard account recovery and password-reset flow. With two-step verification turned on, password reset requires two pieces of security info (for example, a code from the Authenticator app and a code sent to a backup email or phone).
- Follow the steps in How to reset your Microsoft account password. With two-step verification enabled, two security codes will be required instead of one.
- If the current security info (alternate email/phone) is not accessible, use the account recovery form and follow the guidance in Security info & verification codes / Replace your Microsoft account security info.
- If repeated sign-in attempts are failing
- Microsoft Entra multifactor authentication may temporarily block further attempts if it detects unusual activity (for example, many failed sign-ins). Wait and try again later, or use a different MFA method if one is available.
- If malicious activity is suspected, an IT administrator should review Microsoft Entra sign-in logs.
If none of the available verification methods work and there is no other admin who can reset MFA, direct contact with Microsoft Support (and escalation to the Data Protection team for business tenants, or use of the official account recovery process for personal accounts) is required; forum moderators and standard support channels cannot bypass verification or directly change security settings.
References:
- Sign in to your work or school account using two-step verification
- Common problems with two-step verification for a work or school account
- How to use two-step verification with your Microsoft account
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
- I need to speak with a real person and it seems impossible. - Microsoft Q&A