Need my 2fa reset and im the admin

Because the phone is damaged and the account uses two-factor authentication, the Multi-Factor Authentication (MFA) methods must be reset by an administrator or by Microsoft support, depending on whether there are other admins in the tenant.

Use the path that matches the situation:

1. If there is another cloud/tenant admin
   1. Ask that admin to sign in to the cloud service portal as admin.
   2. Go to the MFA user management page: https://account.activedirectory.windowsazure.com/usermanagement/multifactorverification.aspx
   3. Select the checkbox for the affected admin account.
   4. Select Manage user settings.
   5. Select Require selected users to provide contact methods again, then select Save.
   6. Next time signing in, MFA setup will be required again and a new phone or method can be configured.
2. If there is no other admin and this is a work/school (business) tenant
   1. Contact Microsoft’s Global Customer Service/Data Protection team by phone using the official support numbers: see Customer service phone numbers - Microsoft Support in the referenced answers.
   2. When calling, clearly state:
      • This is an Office 365/Microsoft 365 for business or Entra ID account.
      • It is a company (work/school) account.
      • The caller is the only global/tenant administrator.
      • Access is blocked because the phone with Microsoft Authenticator (or MFA method) is lost/damaged.
      • A reset of MFA/authentication methods for the admin account is needed.
   3. The frontline agent will create a service request and route it to the Data Protection team, which can verify identity and reset MFA for the admin account.
3. If unable to reach support directly (business tenant)
   • As an alternative, create a temporary trial Microsoft 365 tenant (separate from the locked one), sign in to its admin center, and open a support ticket from there requesting the Data Protection team to help reset MFA on the original tenant. Clearly provide:
     • The admin username of the locked tenant.
     • The tenant domain.
     • Error messages seen during sign-in.
     • Confirmation that this is the only admin account.
4. If this is not a business/tenant account (personal Microsoft account)
   • Use the standard account recovery and security-info flows referenced in the two-step verification article (for example, choosing I don't have any of these when prompted for security info and following the prompts to replace security info).

Until MFA is reset, sign-in will remain blocked because Microsoft support and forum moderators cannot send verification codes or bypass security directly; only another admin or the Data Protection team can clear/reset MFA for an admin who lost access to their phone.

References:

• Can't use Azure Multi-Factor Authentication to sign in to cloud services after you lose your phone or the phone number changes
• I need to reset my mfa methods - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Microsoft Authenticator app doesn't show 6-digit OTP code - Microsoft Q&A
• Common problems with two-step verification for a work or school account