A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The recovery method depends on whether this is a personal Microsoft account or a work/school account; use another registered sign-in method if offered, otherwise replace the personal account’s security information or ask the organization’s administrator to reset MFA.
Personal Microsoft account
For an Outlook.com, Hotmail, Xbox, Skype, or other personal Microsoft account:
- Start signing in with your email address and password.
- At Verify your identity, select I can’t use my Microsoft Authenticator app right now, Sign in another way, or a similarly worded option.
- Use any accessible method shown, such as an alternate email or passkey.
- If none is accessible, select I don’t have any of these and follow the prompts to replace your security information.^1^
Replacing all security information can restrict the account for 30 days as a security precaution. Microsoft support agents cannot send verification codes or manually change account details.
After access is restored:
- Open the Microsoft account Security tab.
- Select Manage how I sign in.
- Select Add a new way to sign in or verify.
- Register Authenticator, an accessible email address, or a passkey.^2^
Work or school account
- On the sign-in screen, select Other ways to sign in and use an available method.
- If Recover your account appears, select it and complete your organization’s identity-verification process. This option is available only when the organization has configured account recovery.^3^
- If neither option works, contact the company or school IT help desk and request:
“Reset my MFA methods or require me to re-register for MFA because I no longer have access to the registered phone.”
An Authentication Administrator can perform the reset in:
Microsoft Entra admin center → Entra ID → Users → select the user → Authentication methods → Require re-register MFA
This removes the user’s existing phone numbers, Authenticator registrations, and software OATH tokens. At the next sign-in, the user is prompted to register a new authentication method.^4^
If this is the organization’s only administrator account and no alternative sign-in method works, account-level assistance from Microsoft Support is required; another user cannot reset their own locked authentication methods.
References