Urgent: MFA/Authenticator Reset Required – Sole Administrator Locked Out

Question

I recently purchased a new phone and formatted my previous device. Since then, I have been unable to configure my email account in the authenticator app.

When I try to sign in, I am asked to approve the request or enter a code from the authenticator. I cannot do so because the account has not yet been configured on my new device, creating a continuous authentication loop.

I am also the sole administrator of the account/tenant, so there is no other administrator who can reset my MFA settings.

Please assist with resetting or reconfiguring my multi-factor authentication so I can register the authenticator on my new device and regain administrative access.

Please advise what identity verification or information you require to proceed.

Answer 1

1. 1 Check for an active session anywhereBefore anything else, check every device, browser, and app where you might still be signed in — a laptop browser tab, the mobile Outlook or Teams app, a saved session in another browser profile. If Microsoft's 'remember this device' hasn't expired somewhere, you may still have live access to the Microsoft Entra admin center without re-authenticating. If so, go to Entra admin center > Users > your account > Authentication methods, and delete/reset the old device's registration yourself — this is by far the fastest fix and avoids support entirely.
2. 2 Try the alternate verification option on the sign-in screenOn the MFA prompt itself, look for a link like 'I can't use my Microsoft Authenticator app right now' or 'More ways to verify.' If you ever configured a backup method (a phone number for SMS/call, or a secondary email), it may let you in without the app.
3. 3 Check for a break-glass emergency access accountIf your organization set up a break-glass account (a highly-privileged account excluded from normal MFA/Conditional Access, per Microsoft's recommended best practice), sign in with it and use it to reset your own account's authentication methods.
4. 4 For a personal Microsoft account: use the Account Recovery FormIf this is a personal outlook.com/hotmail.com account rather than an organizational tenant, go to account.live.com and use the recovery form. It asks questions about your account history (recent passwords, contacts, subject lines) and typically takes 24 hours to a few days to process.
5. 5 For an organizational tenant with no other admin: contact Microsoft support directlyCall Microsoft 365 for Business support (through the phone number on your billing/subscription portal, since you can't reach the admin center). Be ready to prove ownership of the tenant and domain — the strongest proof is usually the ability to add a DNS TXT record to your custom domain, since that's very hard to fake. They may also ask for your Tenant ID, admin username, and billing details.
6. 6 Once you're back in, set up a break-glass accountTo avoid this ever happening again, create a dedicated emergency-access account with a strong password and a hardware key or offline-recoverable MFA method, and exclude it from Conditional Access policies. Store its credentials somewhere secure and offline.

Answer 2

Some other ideas - did you purchase your license from a Microsoft reseller? Some reseller relationships have a delegated admin access feature, and allows the reseller to come in and help you reset your account. If not you have to contact Microsoft support as per suggested by others.

Answer 3

Please note that this is a user-to-user support forum; no one here has control over user accounts, particularly regarding issues such as logging in, resetting passwords, changing access permissions, etc.

Dear Mohamed Alkooheji,

Good day! Welcome to Microsoft Q&A forum!

Regarding this situation, you're the only admin, in this situation, the Microsoft Data Protection Team has tools and processes in place to verify identity and regain access to administrator accounts.

Even though you mentioned being the sole administrator, I would still like you to double-check if there are any other accounts with administrative privileges or verify whether the tenant is managed by a third party. If so, please ask them to revoke MFA for you - please follow the step-by-step instructions provided in the referenced article: Manage user authentication options. Otherwise, please refer to the following steps.

1/ Please try to find the related hotline number to call the frontline let them raise a ticket for you: Technical or Sales support phone numbers (for Work account, scroll down to find your region's number) 

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with. 

Answer: Authenticator. 

A: What products do you use? 

B: Office 365 for business. 

Verification: Education or company account? 

B: For companies 

A: Are you an administrator? 

B: Yes. 

A: Are there any other administrators in your organization? 

B: No. 

A: I need one.... Service request? 

B: Yes 

(Important Note to reach a live support agent: Sometimes, you would hear the computer-generated voice at first, please kindly wait for it to end, and if an agent is available, you would be directed to them and get your support. Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "You can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.) 

Also, please kindly check if you know someone with a Microsoft 365 Business tenant to help you raise a support ticket on your behalf.

2/ As an alternative, you can create a new tenant account and submit your request from there.    

To set up a new tenant, please follow these steps: 

• Visit Compare Office 365 Enterprise Pricing and Plans | Microsoft 365, choose any plan and click try for free to start a free trial.    
• Follow the guided setup process to create a new account for a new tenant. 

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In the ticket's description, you could refer to this message

"Hello,

I am currently locked out of my Microsoft 365 tenant because multi-factor authentication is enforced, and I am unable to complete the verification process. I am the only global administrator for this tenant, which means I cannot access my account or the Microsoft 365 Admin Center. To resolve this, I have created a new tenant and would like to be connected with the Data Protection Team to verify my identity and assist with regaining access. I am available to provide any required documentation or verification to support the recovery process."

Ticket Support: Log in the Microsoft 365 Admin Center using the newly created trial admin account (not the currently locked one) > Support > Help & Support. You can raise support ticket at: https://admin.microsoft.com/#/support/requests   

When you open a support ticket, please make sure to turn off the Support Assistant (AI) in the help panel.  

Several customers have reported issues when the Support Assistant is turned on  the system sometimes fails to display the “Contact Support” option.  

As shown in the screenshot, simply switch Support Assistant > Off, then type your issue description.  Once the AI is off, the “Contact Support” button will appear normally, allowing you to submit a ticket directly.

• After clicking on "Help & Support" button, you can type "I need agent support via phone or email". After that, you can click on "Contact support" 
• Choose contact method: "Phone" 
• Fill all the information in this contact support details, please describe your situation carefully so they will have enough information to help you. 
• Finally, click on "Contact me"
• After completing them, you will receive an email appointment for a meeting to review this issue professionally together. 
• For more details, you could refer to this article: Get support for Microsoft 365 for business 
• This new trial tenant will not give you access to any of the data or settings in your original locked tenant. It is solely a temporary means to contact Microsoft support.   
• Be prepared for Microsoft support to ask for verification of your identity and administrative rights for the locked tenant.   
• The resolution time might be longer as you are contacting support from a different tenant.   
• Remember to cancel the trial subscription for the new tenant once your issue with the original account is resolved to avoid any unintended charges. You can typically do this within the Microsoft 365 Admin Center under "Billing" > "Your products."

Kindly let me know when there are updates or if you need further assistance. Any updates you’re able to share would be really helpful.

I'm here and happy to help! Thank you for your kindness and patience!