A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
For a personal Microsoft account where Azure is only prompting for Microsoft Authenticator (approve request or verification code) and the original device is unavailable, self-service options are very limited. The behavior described matches a situation where the Azure MFA profile is effectively stuck on Authenticator-only.
From the provided guidance, there are two relevant recovery paths depending on how the account is used:
- If the personal account is also a guest or user in an Azure/Entra tenant
In a similar case, MFA was reset by using another Global Administrator account in the tenant:- Sign in to the Microsoft Entra admin center with a different Global Administrator account in the same tenant (for example, a break-glass or secondary admin account).
- Go to Identity → Users → All users.
- Select the affected user (the personal account that is locked out).
- Open Authentication methods.
- At the top, select Require re-register MFA.
- After this, sign in again with the affected account; Azure will prompt to register MFA from scratch on the new phone.
- If there is no other Global Administrator and the tenant is effectively locked out
In cases where the only Global Admin is locked out due to MFA and no alternative methods are available, the documented resolution is via Microsoft support escalation to the Data Protection (DP) team. In similar tenant-lockout scenarios:- A support ticket was opened with Microsoft.
- The case was escalated (often via a duty manager) to the Data Protection team.
- After identity verification (business documentation, contact details, etc.), the DP team reset/re-registered MFA for the locked-out admin account so that a new MFA method could be configured.
If the issue is purely with signing into the Microsoft account itself (not just Azure) and no MFA method works, the only documented self-service path is to use the Microsoft account recovery form and related guidance to try to regain access to the account. If that fails, support escalation is again required.
References:
- Reset Personal Azure MFA - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
- How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
- I can't sign in to my Microsoft account
- Use a screen reader to set up and troubleshoot multifactor authentication
- Microsoft Authenticator FAQs
- I need to speak with a real person and it seems impossible. - Microsoft Q&A
- Azure has blocked myphone number for SMS verification due to a “bad reputation” flag - Microsoft Q&A