Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
To stop Microsoft Authenticator being required and get back into Teams/Word on the new phone, the sign-in methods on the account must be changed or reset. The exact steps depend on whether this is a school/work (education) account and whether an admin is available.
- Try another verification method (if available)
- On the sign-in screen where Authenticator is requested, look for options like Use a different verification option, I can’t use my Microsoft Authenticator app right now, Text, or Call.
- If SMS or phone call works, sign in and then:
- Go to https://aka.ms/mysecurityinfo
- Delete the Authenticator app sign-in method from the list.
- Add a new method (phone, email, or re-add Authenticator on the new phone).
- If this is a school/education account and there is an IT admin
- Contact the school/organization IT helpdesk and ask them to reset MFA for the account.
- They should:
- Go to Microsoft Entra admin center → Users → All users → select the user.
- Open Authentication methods.
- Select Require re-register multifactor authentication.
- After that, sign in again; the system will prompt to set up MFA from scratch on the new phone (and the old Authenticator registration will effectively be removed).
- If the account is a business/education account and there is no other admin
- If the user is the only administrator for the tenant and is locked out because of Authenticator, the only supported path is via Microsoft Support/Data Protection team.
- Call the regional Customer service phone number and, when prompted by the automated system, clearly indicate:
- The problem is with Authenticator and Office 365 for business/education.
- It is a company/education account.
- The caller is the only administrator.
- A service request is needed so the Data Protection team can reset MFA.
- Data Protection will verify identity and can remove/reset the Authenticator requirement on the account.
- If Authenticator is still installed on an old device
- If the old phone still works and has Authenticator signed in:
- Open Authenticator on the old phone and approve the sign-in request.
- Then go to https://aka.ms/mysecurityinfo and remove the old Authenticator method.
- Finally, add a new method (phone, email, or Authenticator on the new phone).
- Removing Authenticator from the phone vs. from the account
- Deleting or resetting the Authenticator app on the phone alone does not remove it as a sign-in method. It must be removed from the account’s security info (https://aka.ms/mysecurityinfo) or by an admin/Data Protection as described above.
If none of the alternative methods (SMS, call, backup email) work and there is no admin to reset MFA, contacting Microsoft Support and asking for the Data Protection team is required to “get rid of” the current Authenticator requirement and regain access.
References:
- How to go passwordless with your Microsoft account
- Can't set up MFA because five devices are already registered to use an authenticator app
- Troubleshoot problems with Microsoft Authenticator
- Microsoft Authenticator FAQs
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A