Email accounts lost the connection to my Authenticator app after getting a new phone

Question

Email accounts lost the connection to my Authenticator app after getting a new phone

Robert Sweet 0

I would like to start by letting whoever reads this know that the fact I cannot speak to a representative over the phone is beyond frustrating. I cannot understand how it is deemed reasonable to prevent a Microsoft customer immediate and comprehensive access to an actual person, for help with their Microsoft account(s).

With that out of the way, I got a new phone and now when I attempt to get into three of my email accounts, my Microsoft Authenticator App on my phone does not receive the code. For these three accounts (one school and two work), I didn't set up alternative methods for verification. I would like to note that the old phone was wiped by Verizon and is long gone at this point. Can you please help me connect my accounts to the Authenticator app on my new phone?

0 comments

1 answer

Your answer

Answer 1

For the three work/school accounts where Microsoft Authenticator was the only verification method and the old phone is wiped, the accounts cannot be directly reconnected to the app from the new phone. The verification methods must first be reset or replaced through the account’s security settings or by an administrator/support team.

Use the following options depending on what access still exists and what type of account each one is:

Work or school accounts with an organizational IT/help desk
Contact the organization’s IT/help desk for each affected work/school account.
Explain that the old phone with Microsoft Authenticator was wiped and there are no alternative verification methods configured.
Ask them to clear or reset the MFA/two-step verification settings for the account.
After they clear the settings, sign in again with username and password. The next sign-in will prompt to set up two-step verification from scratch.
On the new phone, install Microsoft Authenticator and follow the registration prompts to add the account.
During setup, add at least one backup method (SMS, phone call, or email where allowed) so there is another way to verify if the phone is replaced again.

This path is required for work/school accounts when there is no access to the old device and no backup methods; only the organization’s admin/help desk can reset those MFA settings.

Work or school accounts where another verification method might exist

If any of the three accounts had more than one method configured (for example, SMS, office phone, or email):

At the MFA prompt, choose Sign in another way (or similar option).
Select a listed alternative method (SMS, call, etc.) and complete verification.
After signing in, go to the account’s security info page and:
- Add the Microsoft Authenticator app on the new phone.
- Keep the existing backup methods or add new ones.

If Sign in another way does not appear, there are no other methods configured and the IT/help desk reset described above is the only option.

Personal Microsoft accounts (if any of the three are personal accounts)

For personal Microsoft accounts, verification code issues and missing backup methods are handled through the self-service flows:

When prompted for a code from Microsoft Authenticator, select I don’t have my Microsoft Authenticator app.
If backup security info (phone/email) is available, select it and complete verification.
If there is no access to any listed methods, select I don't have any of these and follow the prompts to update security info, as described in the verification-code troubleshooting guidance. This may trigger a security waiting period if all security info is changed at once.

Relevant behavior and limitations from the documentation

Push notifications may still be going to an old device if the Authenticator app was last used there. When that device is gone or wiped, the notification cannot be approved and another method or reset is required.
If no alternative methods are configured and the device with Authenticator is lost, the only supported paths are:
- Use the I don't have any of these flow for personal accounts to update security info.
- Have an admin/help desk or Microsoft’s Data Protection team (for single-admin tenants) reset MFA for work/school accounts.
For tenants where there is only one global admin and that admin is locked out due to Authenticator on a lost phone, Microsoft’s Data Protection team must be engaged via a support ticket or phone support to restore access.

After access is restored and the new phone is set up with Microsoft Authenticator for each account, configure multiple verification methods (Authenticator plus SMS/phone/email where allowed) and keep security info up to date to avoid lockout the next time a device is replaced.

References: