A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
For a locked-out business account where Microsoft Authenticator is required and there is no access to the app, direct contact with Microsoft support and the Data Protection team is required. Community forums and this channel cannot unlock or change account security.
Use the following supported paths:
- If this is a work/school (Microsoft 365 business) account and you are the only admin
The Microsoft Data Protection team must verify identity and reset MFA:- Call Microsoft using the regional number listed under Customer service phone numbers.
- When the IVR/automated system asks questions, respond along these lines to reach the correct team:
- Problem type: say “Authenticator” or “Lost account”.
- Product: “Office 365 for business”.
- When asked: education or company account → “For companies”.
- Are you an administrator? → “Yes”.
- Any other administrators? → “No”.
- Do you need a service request? → “Yes, I need to create a ticket and speak with the Data Protection team.”
- The frontline agent should open a ticket and route it to the Microsoft 365/Azure Data Protection team, who have tools to verify identity and help reset MFA for a sole global admin.
- If you cannot reach support by phone (workaround)
Create a temporary trial tenant only to open a support ticket:- Sign up for a Microsoft 365 trial to create a new tenant.
- Go to the Microsoft 365 Admin Center of this new tenant and open Help & support.
- In the ticket, clearly state:
- That access is needed to a different existing tenant.
- The admin email and domain of the locked tenant.
- That this is a tenant lockout and you are the only global admin and cannot pass MFA because of the Authenticator issue.
- Request escalation to the Data Protection team to reset MFA on the original tenant.
- After the original tenant issue is resolved, cancel the trial to avoid charges.
- If this is a personal Microsoft account / Outlook.com
- If the account is locked, follow the instructions in the sign-in window (often an aka.ms/ link) to submit the unlock form.
- Use the Sign-in Helper for Outlook.com account unblocks and follow the guided steps.
- If verification codes are not received or the account remains locked, complete the recovery form and/or contact support as directed in the article.
- If repeated sign-in attempts or MFA failures caused a temporary block
- Microsoft Entra multifactor authentication can temporarily block sign-ins after repeated attempts.
- Wait and try again later, or use a different registered MFA method if one exists.
- If this is a work/school account, an IT admin can review Microsoft Entra sign-in logs and adjust MFA settings.
Because access to the locked tenant and its security settings is required, only Microsoft support (specifically the Data Protection team for business tenants) can resolve this scenario.
References:
- Common problems with two-step verification for a work or school account
- Microsoft account has been locked
- Troubleshoot sign-in issues and account access problems
- My username and password have stopped working
- Unblock my Outlook.com account
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
- I need to speak with a real person and it seems impossible. - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A