A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
To recover access after losing Microsoft Authenticator, the available options depend on whether this is a personal Microsoft account or a work/school account and what recovery methods are still available.
- If this is a personal Microsoft account and some security info still works (email/phone):
- Go to the Advanced security options page and sign in using the password and any working verification method.
- Select Add a new way to sign in or verify, set up a new phone/email or another method, verify it, then remove the old/unavailable method.
- Do not remove all existing security info at once, or the account may be restricted for 30 days.
- If all existing methods except Authenticator still work, use them to complete sign-in and then re-add Microsoft Authenticator.
- If this is a personal Microsoft account and all security info is lost:
- Start sign-in, and at the Verify your identity prompt choose I don't have any of these.
- Follow the flow to replace security info. After submitting, there is a mandatory 30‑day wait before normal sign-in is allowed.
- If the password is also forgotten and no security info is available, use the account recovery form via Recover account and provide as much accurate information as possible.
- If this is a work or school account and the device with Authenticator is lost or reset:
- If another sign-in method is configured (SMS, email, security key), use that to sign in and update MFA methods.
- If no other method works and access is completely blocked, contact the organization’s Help desk/IT admin and ask them to clear MFA settings. After they clear the settings, the next sign-in will prompt to re-register MFA.
- If this is a work/school tenant where the only global admin is locked out (no other admin can reset MFA):
- A Data Protection (DP) support case is required. This is done by contacting Microsoft Support by phone and clearly stating that the only global admin is locked out due to MFA and that a Data Protection team escalation is needed.
- If direct phone routing is difficult, one documented workaround is to create a temporary new tenant (for example via a trial subscription), then from that tenant’s admin center open a support ticket requesting Data Protection assistance for the original tenant. The DP team will verify identity using business documentation and then reset MFA or add another auth method.
- If Authenticator backup itself cannot be restored:
- Authenticator backups can only be restored on the same platform type (iOS→iOS, Android→Android).
- If the backup account (Microsoft account or iCloud) cannot be accessed, support cannot restore Authenticator data. In that case, each account must be added again once access to the underlying accounts is recovered.
- When stuck in an MFA loop on the device:
- In Authenticator, if “Sign in to restore your account” or “Action required” appears next to accounts, tap Sign in or the account tile and complete sign-in with password plus email/phone verification to re-activate them.
- On Android, use Restore from backup or Begin recovery before signing in; if those options are not visible, sign out/remove all accounts in Authenticator, then start restore again.
There is no supported way for Microsoft support agents to bypass verification or send codes on behalf of the user for personal accounts. For work/school tenants where the only admin is locked out, the documented path is escalation to the Data Protection team through a support ticket or phone support as described above.
References:
- Restore account credentials from Microsoft Authenticator
- Common problems with two-step verification for a work or school account
- Troubleshoot Microsoft verification code issues
- How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
- Can't sign in to my email - Microsoft Q&A
- Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A