Authenticator Issue

Question

I Lost access to microsoft authenticator for email and 365 admin.

Please assist with account recovery

---

Moved from Microsoft Security | Microsoft Authenticator

Answer 1

Lin,

No one has access to the backend in the forum. You must proceed with the recovery on your own.

Some methods here.

https://yourwindowsguide.com/2026/09/how-to-reset-microsoft-mfa.html

#1:

Reset Microsoft MFA & Recover Access to Your Microsoft 365 Admin Account using Microsoft Support

Another option is to contact Microsoft support if you are locked out of your account. Please note that this method works only for Microsoft 365 Business accounts; for consumer Outlook accounts, you must complete the recovery form as described here.

Checklist

• Tenant details: Your primary domain and initial onmicrosoft.com domain
• Administrator identity: Global Administrator UPN (User Principal Name).
• Proof of ownership: Custom domain details and access to DNS records to verify domain ownership.
• Billing & Account verification: Subscription billing info, company name, phone number on file, and alternate contact email.
• Partner / Reseller context: Details of former CSPs or resellers (if applicable) and any prior support ticket numbers.

Get the Country Support phone number

Next step, use this Microsoft support document to find the contact number for your country.

Customer service phone numbers – Microsoft Support

Then call the number. See the extensive details on how to reach a Human:

Navigating the Support IVR — Step-by-Step

When you call Microsoft support to reset Microsoft MFA or resolve a forgotten password for a Microsoft 365 issue, follow these IVR prompts:

• Wait out the intro — You may hear a ~30-second automated introduction (e.g., “you can visit the link…”). Ignore it and wait for the menu options.
• Press 1 — Select yourself as a business email user
• Press 1 again — Choose technical help

---

Automated IVR Conversation Guide

In some regions, the initial interaction is fully automated. Use these answers to navigate it:

1. What kind of problem are you experiencing? — Answer: Login technical support.
2. What product are you contacting us about? — Answer: Microsoft 365 Business Standard.
3. Is this a new case or an existing case? — Answer: New case.
4. Are you a Global Administrator? — Answer: Yes.
5. Are you the Global Administrator for the domain? — Answer: Yes, I am the Global Administrator for the domain.
6. Would you like to be connected with a Microsoft representative regarding your issue? — Answer: Yes, please.
7. If asked to verify your phone number: Confirm that the phone number is already associated with the Microsoft 365 administrator profile.

---

Create a Temporary Tenant to Open a Support Ticket

If you get stuck in the automated IVR loop or cannot reach a live agent via telephone, offer this practical fallback method:

• Step 1: Sign up for a temporary Microsoft 365 Business trial account to generate a fresh tenant.
• Step 2: Log in to the Microsoft 365 Admin Center of the temporary tenant.
• Step 3: Go to Support > New Service Request and request an escalation to the Data Protection / Tenant Recovery team on behalf of your locked original tenant.
• Step 4: Clearly outline the locked tenant’s domain, UPN, and case history in the ticket description.
• Step 5: Cancel the subscription immediately to avoid charges.

Answer 2

At the MFA prompt, select Sign in another way, Other verification options, or I can’t use my Microsoft Authenticator app right now; if no previously registered method is available or usable, contact Microsoft Support and request tenant recovery for a sole Global Administrator locked out by MFA.

1. Check for another registered sign-in method

This does not mean registering a new method—the option must have been configured before the lockout.

1. Start signing in with the Microsoft 365 administrator account.
2. At the Authenticator prompt, select Sign in another way, Other verification options, or I can’t use my Microsoft Authenticator app right now.
3. If offered, use a previously registered SMS number, voice call, security key, or other verification method. Microsoft documents using Other verification options when another method is already configured.^1^
4. After signing in, open https://aka.ms/mysecurityinfo, add a working method, and then remove the lost Authenticator registration.^2^

If no alternative method appears—or it also cannot be used—proceed with tenant recovery. Reinstalling Authenticator alone will not authorize the new app against the existing registration.

2. Request Microsoft tenant recovery

Because there is no second Global Administrator to reset the authentication methods, Microsoft’s tenant-lockout guidance requires contacting Microsoft Support.^3^

1. Open the official Microsoft business-support contact page and select the current number for your country or region.^4^
2. Tell the representative:

   This is a Microsoft 365 business tenant lockout. I am the sole Global Administrator, I know my password, but I lost access to Microsoft Authenticator and cannot satisfy MFA. There is no other Global Administrator. Please create a service request for sole Global Administrator MFA recovery and route it to the Data Protection or Tenant Recovery team.

3. Have the following available for private verification:
   • Locked administrator sign-in name and tenant/domain name
   • Subscription and billing details
   • Invoice or order information
   • Access to registered business contact channels
   • Ability to prove domain ownership, potentially through DNS
   • A reachable phone number and email address

A closely matching Microsoft Q&A recovery case confirms that the Data Protection team handles restoration when the sole Global Administrator cannot re-register MFA.^5^

Do not post tenant IDs, invoices, verification codes, or other account details publicly.

If direct support cannot open the request

• Partner or reseller subscription: Contact the provider that sold or manages the Microsoft 365 subscription. With an active GDAP relationship and the necessary role, a partner may restore access or create a support request; Data Protection will still verify matters directly with the customer.^3^
• No usable phone/support route: A documented Q&A workaround is to create a temporary Microsoft 365 trial tenant, sign in to its admin center, and select Help & support → Contact support to open a case for the locked tenant.^6^ Cancel the trial afterward to avoid renewal charges.

After access is restored

1. Register at least two strong authentication methods.
2. Create separate administrative redundancy rather than relying on one administrator.
3. Establish two cloud-only emergency-access accounts and alert on their use. Microsoft recommends two such accounts to prevent complete tenant lockout.^7^
4. Remove the lost phone’s obsolete Authenticator registration.

---

References

1. You don't receive a text or voice call that contains the verification code for Microsoft Entra multifactor authentication
2. Can't set up MFA because five devices are already registered to use an authenticator app
3. Preventing tenant lockouts
4. Contact Microsoft customer support
5. Lost access to Authenticator app - Microsoft Q&A
6. Sole Global Administrator locked out due to Microsoft Authenticator MFA loop – Tenant Recovery needed - Microsoft Q&A
7. Security operations for privileged accounts in Microsoft Entra ID

Answer 3

Dear Jonathan Lin,

Thank you for reaching out. Could you please tell me is there any other global administrator in your organization? 

If yes, I recommend you contact them to raise a request for resetting your authentication method in the Entra admin center. Other admins can revoke MFA sessions and require re-registration in Microsoft Entra admin center. For step-by-step details, refer to the official Microsoft documentation: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn  

However, if you are the sole Global Administrator and are unable to access your account due to an authentication issue, please note that the Community Support team does not have the required permissions to reset user or administrator accounts. In this situation, I recommend contacting the Data Protection team for further assistance, as account ownership verification and account recovery must be handled by the appropriate support team.

Please try to find the related hotline number to call the frontline let them raise a ticket for you: Technical or Sales support phone numbers (for Work account, scroll down to find your region's number) 

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with. 

Answer: Authenticator.
A: What products do you use?
B: Office 365 for business. 
Verification: Education or company account? 
B: For companies 
A: Are you an administrator? 
B: Yes. 
A: Are there any other administrators in your organization? 
B: No. 
A: I need one.... Service request? 
B: Yes 

(Important Note: Sometimes, you would hear the computer-generated voice at first, please kindly wait for it to end, and if an agent is available, you would be directed to them and get your support. Depending on your country or region, when you call the support number, you may hear an introduction of about 30 seconds such as "You can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.) 

As an alternative, you can create a new tenant account and submit your request from there.    

To set up a new tenant, please follow these steps: 

• Visit Compare Office 365 Enterprise Pricing and Plans | Microsoft 365, choose any plan and click try for free to start a free trial.    
• Follow the guided setup process to create a new account for a new tenant. 

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In the ticket's description, you could refer to this message

"Hello, I am currently locked out of my tenant because multi-factor authentication is enforced, and I am unable to complete the verification process. I am the only global administrator for this tenant, which means I cannot access my account or the Microsoft 365 Admin Center. To resolve this, I have created a new tenant and would like to be connected with the Data Protection Team to verify my identity and assist with regaining access. I am available to provide any required documentation or verification to support the recovery process."

Ticket Support: Log in the Microsoft 365 Admin Center using the newly created trial admin account (not the currently locked one) > Support > Help & Support. You can raise support ticket at: https://admin.microsoft.com/#/support/requests   

When you open a support ticket, please make sure to turn off the Support Assistant (AI) in the help panel.  

Several customers have reported issues when the Support Assistant is turned on the system sometimes fails to display the “Contact Support” option.  

As shown in the screenshot, simply switch Support Assistant > Off, then type your issue description.  Once the AI is off, the “Contact Support” button will appear normally, allowing you to submit a ticket directly.

• After clicking on "Help & Support" button, you can type "I need agent support via phone or email". After that, you can click on "Contact support" 
• Choose contact method: "Phone" 
• Fill all the information in this contact support details, please describe your situation carefully so they will have enough information to help you. 
• Finally, click on "Contact me"
• After completing them, you will receive an email appointment for a meeting to review this issue professionally together. 
• For more details, you could refer to this article: Get support for Microsoft 365 for business 

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

Kindly let me know when there are updates or if you need further assistance. Any updates you’re able to share would be really helpful.

Thank you for your kindness and patience! 

---

If you have additional questions regarding this response, kindly click Comment.

Note: Please follow the steps in forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.