MFA Issue: Receiving invalid verification code for a secondary business account (I am the IT Admin)

Question

MFA Issue: Receiving invalid verification code for a secondary business account (I am the IT Admin)

IT 0

Hi,

I am an IT Administrator for my organization, and I am experiencing an issue with Multi-Factor Authentication (MFA) on a secondary business account.

When trying to sign in to this account, the verification code is received, but entering it results in an "invalid code" error message. Because the code is rejected, I am unable to access the account.

Since I am managing this from the IT side, could you please assist in troubleshooting this invalid code error or suggest the best way to reset the MFA settings for this user account?

Thank you!

0 comments

3 answers

Your answer

Answer 1

Killian N 3,470 Independent Advisor

Hi,

If the user is receiving the MFA verification code but every code is being rejected as invalid, the issue is often related to one of the following:

The code is being entered after it has expired (verification codes typically have a short validity period).
Multiple verification attempts have generated newer codes, causing older codes to become invalid.
There is a time synchronization issue on the authentication device (particularly when using authenticator apps).
The user's MFA registration data may be corrupted or outdated.

Since you are the Microsoft 365 administrator, the fastest way you can try is using your global admin account and reset MFA for your secondary account by following the steps outlined in this article: Manage user authentication methods for Microsoft Entra multifactor authentication.

I hope this helps point you in the right direction. If you have any questions or need further assistance, please don’t hesitate to reach out. I’m happy to continue supporting you and look forward to your update.

If the answer is helpful, please click "Yes" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

IT 0 Reputation points

2026-08-05T09:07:26.05+00:00

Hi,

Thank you for the reply. I am using a Mac, and I have already checked and forced a date/time re-synchronization on both my Mac and my mobile device. Unfortunately, the MFA codes are still being rejected as invalid.

Since I am an IT Administrator with access to the Microsoft Entra admin center via my primary admin account, could you please guide me on how to completely reset/revoke the MFA session for this secondary account so I can set it up fresh?

Thank you!
Killian N 3,470 Reputation points Independent Advisor

2026-08-05T09:14:43.9966667+00:00

Hi,

Since you've already verified the date and time synchronization on both the Mac and the mobile device, and the verification codes are still being rejected, I would recommend completely resetting the MFA registration for the affected account and then re-registering it from scratch.

As a Global Administrator or Authentication Administrator, you can do the following from the Microsoft Entra admin center and follow this:

I hope this helps.
IT 0 Reputation points

2026-08-05T09:20:46.2733333+00:00

Hi Killian,

Thanks for the guidance, but this secondary account is on a completely different domain / tenant where I do not have Entra admin privileges to reset the MFA myself.

Since I cannot sign in to this secondary account due to the MFA error, and I don't have admin access on that specific domain, could you please escalate this ticket to Microsoft Support / Data Protection team or advise on how to get in touch with support to unlock this account?

Thank you!
Killian N 3,470 Reputation points Independent Advisor

2026-08-05T09:26:51.25+00:00
Hi,

Unfortunately, as community members and Independent Advisors, I do not have the ability to escalate cases directly to Microsoft Support, the Data Protection team, or any internal Microsoft engineering teams. I also cannot unlock accounts, bypass MFA requirements, or make changes within a tenant that I do not administer.

Since this secondary account belongs to a different Microsoft 365 tenant and you do not have administrative access to that tenant, the available recovery options are limited to the following:

Contact the Microsoft 365 administrator for that organization and ask them to reset your MFA methods or require MFA re-registration by following the steps that I mentioned above.

Use any alternative authentication methods that may already be registered on the account (such as a secondary phone number, alternate sign-in method, or recovery option).

Contact the organization's internal IT department of that account if the account was provided by an employer, customer, partner organization, educational institution, or other third party.

If you need Microsoft Support involvement, the request typically must be initiated by an administrator from the tenant that owns the account. Microsoft Support generally requires a verified administrator from the affected tenant to open a support case before account-specific actions can be performed.

If you are unsure who manages the tenant, you may want to contact the organization that issued the account and request assistance from their Microsoft 365 administrator, as they are the only party who can reset or remove the MFA registration for that account.

I realize this may not be the answer you were hoping for, but without administrative privileges in the affected tenant, neither the Community nor Microsoft can verify ownership and reset the account through this forum.

Answer 2

IT 0

Hi,

I am an Global/IT Administrator for this tenant. The standard troubleshooting steps provided by the automated bot do not apply here, as the MFA code is generated but continuously rejected as invalid.

Since I am unable to access the Microsoft Entra admin center with this specific account to re-register MFA, please escalate this issue to a human support engineer or provide guidance on how to force an MFA re-registration via PowerShell / Data Protection team.

Thank you.

IT 0 Reputation points

2026-08-05T09:23:34.0866667+00:00

Also, I wanted to add that I tried calling Microsoft support, but the automated phone system just loops and disconnects without connecting me to a representative or offering help.

Answer 3

For an invalid verification code on a work or school account, use this troubleshooting path:

Try another MFA method first
- On the sign-in page, select Other verification options or Sign in another way.
- If another method is available, use it to complete sign-in.
- If the user never registered another method, admin intervention is required.
Validate the code entry method
- If the user selected text/SMS, confirm the exact verification code is being entered.
- If the user selected phone call, the response must be completed by pressing the # key.
Check for time-based code drift
- If the code is generated by an authenticator app, an invalid code can be caused by the computer clock and mobile device clock being out of sync.
- Verify the time on both devices, correct any mismatch, then retry with a new one-time code.
Retry with a fresh sign-in attempt
- If the MFA prompt timed out or there was latency, restart the sign-in flow and enter a new code before it expires.
If there were many failed attempts, stop retrying temporarily
- Microsoft Entra multifactor authentication can detect repeated sign-in attempts as unusual activity and block additional attempts.
- Wait until sign-in is allowed again, or use a different MFA method.
As the IT admin, investigate and reset MFA if needed
- Review the Microsoft Entra sign-in logs for the affected account to determine whether the failures are due to unusual activity or MFA misconfiguration.
- If the user’s registered methods are incorrect or unusable, reset the user’s MFA registration by requiring the user to re-register multi-factor authentication. This removes previous authentication methods and forces setup of new ones at next sign-in.
- Warning: this action removes existing MFA methods for that user, so ensure a valid phone number or authenticator method is available before the next sign-in.
If no self-service/admin path works
- Contact the organization’s Help desk or Microsoft support phone channel for account access issues.