A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because two-step verification (2FA) is turned on and there is no access to Microsoft Authenticator, normal self-service recovery options are very limited.
Use these supported options:
- Try other registered sign-in methods
- If any other methods were set up (SMS, alternate email, security key, etc.), use them instead of the Authenticator app.
- For Microsoft accounts that are passwordless, additional methods may still be available under Security > Advanced security options once signed in from a trusted device.
- If the backup Microsoft account itself is the problem
- If the issue is that the backup Microsoft account (used for Authenticator backup) cannot be accessed, use the Microsoft account sign-in helper to regain access to that backup account: Sign-in helper.
- If the recovery form is being rejected because 2FA is enabled
- For Microsoft accounts with 2FA turned on, support agents cannot bypass 2FA, send password reset links, or change security details. The documentation explicitly states that if 2FA is enabled and none of the verification methods are accessible, support cannot help further and the account cannot be recovered via the recovery form.
- From the guidance: if two-step verification is on and none of the alternate methods are available, there is no manual override or escalation path through support.
- If still signed in on another device or browser
- If there is any device where the account is still signed in (PC, browser, Xbox, etc.), immediately go to the Microsoft account security settings from that session and:
- Add additional authentication methods (phone, alternate email, security key).
- If using passwordless sign-in, consider turning it off temporarily and adding a password back to the account.
- If there is any device where the account is still signed in (PC, browser, Xbox, etc.), immediately go to the Microsoft account security settings from that session and:
- If this is a work or school (Microsoft Entra ID) account
- Contact the organization’s IT administrator or Help desk. They can:
- Review sign-in logs.
- Reset MFA registration for the user so that new methods can be configured.
- If sign-in attempts have been blocked due to many failed tries, wait and then try again or use a different MFA method.
- Contact the organization’s IT administrator or Help desk. They can:
If none of the above apply (no other methods, no signed-in sessions, personal Microsoft account with 2FA enabled), the documented position is that the account cannot be recovered or manually overridden by support.
References:
- Restore account credentials from Microsoft Authenticator
- Help with the Microsoft account recovery form
- How to go passwordless with your Microsoft account
- Common problems with two-step verification for a work or school account
- How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
- Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Unable to change password in my Outlook - Microsoft Q&A
- Global Admin Locked out - Microsoft Q&A