Tenant lockout: only Global Admin, lost MFA (Authenticator)

Ferrecomsa_HN 5 Reputation points
2026-01-09T21:18:31.5366667+00:00

Hi, I am unable to sign in to my Microsoft 365 tenant because my only MFA device (Microsoft Authenticator) is no longer available.

This tenant has only one Global Administrator account, which is mine, and it is protected by MFA using Microsoft Authenticator on a single mobile device. There are no other admin accounts and no alternative MFA methods configured.

The original MFA device is no longer available. Every sign-in to Microsoft 365 requires approval or a 6-digit code from the old Authenticator device, which I cannot provide.

As a result, I cannot access the admin center, Security info pages, Microsoft 365 services, or manage the tenant in any way.

I am stuck in a loop: I need MFA to sign in, but I need to sign in to fix MFA.

Any assistance in recovering administrative access to this tenant would be greatly appreciated. I am ready to provide any documentation necessary to verify identity and domain ownership.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.