MFA Lockout: Unable to Log Into Microsoft Authenticator or Reset Password

Mary 0 Reputation points
2026-03-23T04:59:34.59+00:00

Hi there,

**This issue is pertaining to email ****@outlook.com

I am currently unable to access my Microsoft account due to an issue with Multi-Factor Authentication (MFA) after switching to a new phone. The situation is as follows:

  1. I have MFA activated on my account.
  2. I installed the Microsoft Authenticator app on my new phone, but I cannot log in because it says my password is incorrect.
  3. When attempting to reset my password via a web browser, the process requires verification through a code sent to my phone. After entering the code, the system requests verification through the authenticator app. This creates a circular problem, as I cannot access the authenticator app without first logging in.
  4. I attempted to use the account recovery form, but it was rejected due to MFA being active.
  5. I have also tried using a recovery code and have been waiting over 30 days, but have not received any response or notification.
  6. Essentially, I am unable to log in, reset my password, or disable MFA because the system continuously requires verification through the authenticator app that I cannot access.

I would greatly appreciate your guidance or intervention to restore access to my account as soon as possible, as I am completely locked out.

Thank you!


Moved from Outlook | Web | Outlook.com | Account management, security, and privacy

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Oldest
  1. AI answer

    2026-03-23T04:59:50.33+00:00

    For a personal Outlook.com account with two-step verification turned on and no working MFA methods, self-service recovery is not possible once all verification options are blocked by Microsoft Authenticator.

    Based on the described situation:

    • Two-step verification is enabled.
    • The Microsoft Authenticator app on the old phone is no longer available.
    • The new phone’s Authenticator cannot be set up because sign-in is blocked by MFA.
    • Password reset flows always end by asking for Authenticator approval.
    • The account recovery form is rejected for accounts with two-step verification enabled.

    Microsoft’s documented behavior is:

    • If two-step verification is turned on and none of the alternate verification methods are accessible, support agents cannot override or bypass MFA, reset the password, or change security details.
    • The account recovery form cannot be used to bypass two-step verification.

    The only supported options are:

    1. Use an existing, working MFA method (such as the original Authenticator app, a registered phone, or email/security info that still works) to complete sign-in or password reset.
    2. If no MFA method is accessible and two-step verification is enabled, the account cannot be recovered or unlocked by support.

    If any of the following are still available, they must be used as the path back in:

    • A previously configured alternate phone or email that still receives verification codes and is accepted without then requiring Authenticator.
    • A device or browser where the account is still signed in and can access Security settings to change or remove MFA methods.

    If none of these exist and every flow ends by demanding Microsoft Authenticator approval, the account is effectively unrecoverable under Microsoft’s security rules.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.