A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because the authenticator app is locked and the account is configured to use it for sign-in, the situation is an account lockout that cannot be fixed from the device alone.
First, try the basic Authenticator troubleshooting steps in case the lock is only local on the phone:
- Make sure the Microsoft Authenticator app is updated to the latest version from Google Play.
- Confirm the phone has internet access (try switching between Wi‑Fi and mobile data).
- Check the device date and time are set correctly and automatic time is enabled.
- Turn off any battery optimization for Authenticator and ensure notifications are enabled.
- If the app shows “Authentication did not complete” or similar, unlock the app, then retry.
If sign-in to the Microsoft account still always requires the locked Authenticator and there is no working backup method (SMS, alternate email, or another admin):
- For a work or school (business) account where there are other admins: contact the organization’s Microsoft 365/Entra administrator and ask them to reset multifactor authentication for the account in the Entra admin center so Authenticator can be set up again.
- For a work or school account where this is the only global admin, or if no admin can reset MFA: contact Microsoft Support by phone and ask for a Data Protection team case to regain access to the tenant/global admin account. The Data Protection team has specific processes to verify identity and reset authentication when the only admin is locked out.
- For a personal Microsoft account where no sign-in method works and the account always prompts for the locked Authenticator, use the account recovery and password reset flow and, if that fails, contact Microsoft Support for personal accounts.
There is no supported way to bypass or “break open” a locked Authenticator app; recovery must be done by resetting MFA or the passkeys on the account through an admin or Microsoft Support/Data Protection.
References:
- Troubleshoot problems with Microsoft Authenticator
- Authentication did not complete
- Frequently asked questions about Microsoft Entra multifactor authentication
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A