A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
For a personal Microsoft account that was switched to passwordless sign‑in with Microsoft Authenticator and is now inaccessible, recovery is only possible through the standard Microsoft account recovery and backup mechanisms; support agents cannot directly reset or bypass the security settings.
Use these steps and options:
- Try alternative sign‑in methods
- On the Microsoft sign‑in page for the affected Outlook.com account, choose “I don’t have my Microsoft Authenticator app” or “Use a different verification option” if shown.
- If any other methods were configured (SMS, alternate email, security key), select one of those and complete verification.
- If SMS or email codes are not being received, wait out any temporary lockout and try again later, as repeated failed attempts can trigger protection limits.
- Use the Microsoft account sign‑in helper
- If access to the backup/recovery account is the problem, use the Microsoft account sign‑in helper to try to regain access to that backup account first. The sign‑in helper is the only supported way to recover a locked or inaccessible backup Microsoft account.
- If Authenticator backup cannot be restored
- If the Authenticator app on the phone cannot restore the account credentials (for example, because the backup account cannot be accessed), support agents cannot restore those Authenticator credentials.
- In that case, once access to the Microsoft account itself is regained via recovery, the accounts must be added to Authenticator again from scratch following the documented “add your accounts again” process.
- When Authenticator is not receiving prompts If Authenticator is installed but never receives prompts:
- Ensure the phone has network connectivity.
- Check device notification settings so Authenticator is allowed to send notifications and is not blocked by Do Not Disturb/Quiet mode.
- If some accounts work and this one does not, remove the problematic account from Authenticator and re‑add it after regaining access to the Microsoft account.
- If sign‑in fails after multiple attempts
- Multiple failed attempts can trigger Microsoft Entra/MFA protections that temporarily block further sign‑ins. In that case, wait before trying again or use a different MFA method if one exists.
- If this is a work or school account and there is an admin
- Contact the organization’s Help desk or IT administrator and ask them to clear or reset the MFA settings for the account in Microsoft Entra ID. After the reset, the next sign‑in will prompt to register Authenticator again.
- If this is the only admin on a business tenant
- If the locked account is the sole administrator of a Microsoft 365 business tenant, a Data Protection process is required. The documented path is to contact Microsoft via the global customer service phone numbers and request escalation to the Data Protection team to regain admin access.
If none of the above recovery paths work and there is no working backup method, no access to the backup Microsoft account, and no admin who can reset MFA, the account cannot be reverted “to before Authenticator” or unlocked by support; the automated recovery and backup mechanisms are the only supported options.
References:
- Restore account credentials from Microsoft Authenticator
- Common problems with two-step verification for a work or school account
- Troubleshoot problems with Microsoft Authenticator
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A
- My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A