I am not able to login into my admin account.

Question

I have lost access to my administrator account. Multi-factor authentication (MFA) appears to have been enabled without my knowledge. After changing my password, I was automatically logged out, and I am now being prompted to either enter a code from an authenticator app or approve a verification request through the app.

The issue is that I never set up an authenticator app for this administrator account, so I have no way to complete the verification process or regain access.

I have been unable to reach a live support representative to resolve this issue. Could you please assist me with recovering access to my account or provide an alternative verification method?

Thank you for your help.

Answer 1

Hi Saeed Khan

Based on your description, I understand that you're unable to access your administrator account because Microsoft Authenticator is being required, but you do not have access to any registered MFA method.

May I know whether there are any other Global Administrators in your organization? If yes, please ask them to follow this article to proceed to reset your MFA methods so that you could re-register again: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID |…     

If no, then you are the only Global Administrator and are completely locked out of the tenant. You might need to contact Microsoft Support via phone service number: Customer service phone numbers - Microsoft Support. The agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to DataProtection team who could help you to regain access. 

When a call is made to support, the first step is to provide an automated voice response from AI. Be careful, you won't be able to speak to a support representative if you don't respond appropriately here.   

Here's an example of a response that actually led to a support representative. Please refer to it:

Q. Can you tell me if you are calling as a home user who uses a product or service at home or a business user who uses it in your business to provide the best assistance? 
A.I am a business user. 
Q. Thank you. Can you give me the details of your inquiry? 
A. Login technical support. 
Q. First of all, can you tell me which products you are inquiring about today? 
A. Microsoft 365 business Standard。 
Q. Please wait a moment, I understand Microsoft 365. Are you calling about a new case or an existing one? 
A. New. 
Q. To receive phone support, your phone number must be associated with your Microsoft 365 admin profile. To do this, go to aka.ms/m365profile. Again, it aka.ms/m365profile . This can take 48 hours. In the meantime, you can go to aka.ms/m365profile and file a case online. If you prefer, you can also text the link to the phone number you are calling. What do you think? 
A. The phone number is already linked to the link. 
Q. Can you tell me about the products in your inquiry? 
A. Microsoft 365 Business Standard. 
Q. Are you a Global Administrator? 
A. That's right. 
Q. I'm sorry. I didn't understand. Are you a global administrator for your domain? 
A. Yes, I am a global administrator for the domain. 
Q. If you have any inquiries, you can contact a Microsoft representative. Are you sure? 
A. Yes. Please. 
Q. Yes, I understand. Please wait a moment.

Please note that this team is always overwhelmed, so you might need to wait for them to call you, this should take 3-10 working days. I know that this is not a convenient solution to hear but it seems to be the only way, and it's recommended that you should have a secondary/backup Global Administrator to fix this issue on your own.     

In case the phone line is not supportive, you can consider directly submitting a support request as a helpful workaround:  

-Create a temporary Microsoft 365 tenant using a trial license: Go to Microsoft 365 Business Plans and Pricing and click Try for free to set up a temporary Microsoft 365 tenant with a trial license.    

-Use this new account to sign in to the Microsoft 365 Admin Center and submit a support request on behalf of the affected tenant.

Note: This method doesn't require you to use your new account for your business. Instead, it allows you to create a temporary global administrator account so you can submit a support request, as your original global administrator account is locked out due to issues with multi-factor authentication. The trial account is free for one month. Be sure to delete it after submitting your support request to avoid any automatic renewals or charges from Microsoft.      

For further instructions, you can follow this guide: Get support - Microsoft 365 admin | Microsoft Learn.   

I appreciate your understanding and patience in this matter. While I truly want to assist you, this issue is beyond the scope of my role as a forum moderator. Please understand that we are not Microsoft Support, and I do not have access to internal databases or the ability to escalate cases directly to Microsoft’s internal teams. Therefore, please kindly contact the Microsoft Support team for the most efficient help. 

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

To regain access, the next steps depend on whether there is another administrator in the tenant.

1. If there is another global admin in the organization:
   • Ask that admin to reset the MFA registration for this admin account in Microsoft Entra ID.
   • They should:
     1. Sign in to the Microsoft Entra admin center.
     2. Go to Users → All users.
     3. Select the locked-out admin account.
     4. Open Authentication methods.
     5. Select Require re-register multifactor authentication and save.
   • After this, sign in again with username and password; the portal will prompt to set up MFA from scratch (e.g., scan a new QR code in Microsoft Authenticator or choose another method).
2. If there is no other global admin (this is the only admin account):
   • This scenario requires Microsoft support and the Microsoft Data Protection team to verify identity and reset MFA, because self-service options are blocked once all admin access is lost.
   • Call Microsoft support using the regional Customer service phone numbers - Microsoft Support listed in the context articles.
   • When navigating the automated system, clearly state:
     • The problem is with Authenticator / multi-factor authentication.
     • The product is Office 365/Microsoft 365 for business (work or school / company account).
     • This is an administrator account.
     • There is no other administrator in the organization.
     • A service request is needed and the case must be routed to the Data Protection team (or Tenant Recovery) to reset the admin’s MFA.
   • Be prepared to provide tenant and admin details (admin sign-in address, tenant domain, contact phone, etc.) so the Data Protection team can verify ownership and perform the reset.
3. If this is a personal Microsoft account (not work/school):
   • Use the standard account recovery options:
     • If the password is known but security info is partially available, sign in to Advanced security options, add a new verification method, verify it, then remove the old method. See the steps under "I've lost access to my Microsoft account security info".
     • If all security info is lost, start sign-in, choose “I don't have any of these” at the Verify your identity prompt, and follow the process to replace security info. After replacement, there is a 30‑day wait before full access is restored.
     • If the password is not known and no security info is available, use the account recovery form as described in the same article.

If repeated sign-in attempts have been made, wait before trying again or use a different MFA method if any alternative is configured. If there are signs someone else is trying to access the account, contact the organization’s IT administrator or Microsoft support immediately.

---

References:

• Troubleshoot Microsoft verification code issues
• Common problems with two-step verification for a work or school account
• Use a screen reader to set up and troubleshoot multifactor authentication
• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• "Account verification system is having trouble" error message when you try to sign in by using a work or school account
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Global Admin Locked out - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• I can't sign in to my Microsoft account