Authenticator Issues

Question

Hello, I recently changed my phone that had my authenticator app. Unfortunately this has also logged me out of my schools account. Currently, my school is closed for a really long time so I cannot call them for help. I need access to my email, but every time I try it says I need to use the authenticator, but to use the authenticator I need to authenticate the authenticator (I know it sounds really stupid but it's what going on right now). I need help as soon as possible.

Moved from Microsoft Security | Microsoft Authenticator

Answer 1

Dear @Santiago García,

I understand you changed phones and no longer have access to the Microsoft Authenticator app that was previously registered for your school account. This usually happens because the account’s MFA registration is still tied to the old device, and for work/school accounts a restored Authenticator app still requires you to sign in again before it can be used on the new phone.

Since your school is closed and you cannot call them, please try these options first:

1/ If you can still access the old device

Open the Microsoft Authenticator app on the old phone.

Approve the sign-in request when prompted.

After you regain access, update your security information and re‑register Microsoft Authenticator on your new phone.

This allows the account to recognize the new device for future sign-ins.

2/ Check for another verification option

On the sign-in page, look for options such as “I can’t use my Microsoft Authenticator app right now”, SMS, phone call, or another available method. If you see one of these options, please use it to sign in and then update your security methods.

If none of the above works, please reply with your school email domain. For example, if your email address is ******@contoso.edu, please reply with contoso.edu.

Please understand that the initial response does not always resolve the issue immediately. However, with your help and more detailed information, we can work together to find a solution.

Your detailed response will help diagnose and investigate the issue more efficiently. If I misunderstood what you’re looking for, feel free to let me know or share a screenshot. I’d be happy to help further!

Thank you for your cooperation. I'm looking forward for your reply.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

For a school (work or school) account where Microsoft Authenticator is the only sign-in method and the original phone is gone, the account owner cannot fully reset MFA alone. An admin must clear or reset the MFA methods, or the tenant’s only admin must work with Microsoft support.

Based on the available guidance, the only viable options are:

1. Use any alternative sign-in method, if one exists

• If the account has another method configured (SMS, phone call, email code, security key, Windows Hello, etc.), sign in using that instead of Authenticator.
• After signing in, go to the Security info page for the school account and update the authentication methods (add a new phone number, reconfigure Authenticator, etc.).

2. If there is no alternative method, the school’s IT/admin must reset MFA

• For work/school accounts, when Authenticator is lost or the phone is changed and no backup/alternative method exists, the documented path is:
  • Contact the organization’s help desk or IT admin and ask them to clear or reset the MFA settings for the account.
  • In Entra ID, an admin can select the user and choose to require re-register MFA so that new methods can be set up at next sign-in.
• If the phone was lost or reset, the article explicitly recommends informing the organization’s Help desk so they can update the account and force re-registration of two-factor verification.

3. If the account is the only admin on the tenant (for reference in similar business scenarios)

• When there is only one administrator and that admin is locked out due to Authenticator loss, Microsoft’s Data Protection team must verify identity and help regain access.
• The process is to contact Microsoft Support by phone (Customer service phone numbers - Microsoft Support) and request a Data Protection case to reset authentication methods for the tenant admin.

In a school scenario, this typically means waiting until the school’s IT or help desk is reachable (or using any published remote support channel) so they can reset the MFA methods. Without an alternative sign-in method already configured and without admin intervention, access cannot be restored from the end-user side alone.

---

References:

• Common problems with two-step verification for a work or school account
• Troubleshoot problems with Microsoft Authenticator
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• I need to reset my mfa methods - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A