Is it possible to reset the MFA?

Question

Is it possible to reset the MFA?

minerva1013 0

You are the only global administrator of the company's account, but the MFA authentication means is lost (or unverifiable) and you cannot access the Management Center. Request MFA reset via Data Protection Team.

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-13T08:12:37.4266667+00:00

minerva1013

Thank you for reaching out to Microsoft Q&A.

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: https://learn.microsoft.com/en-us/partner-center/customers/gdap-preventing-tenant-lockouts

If neither option is possible let us know, we are happy to assist you further!
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-14T06:59:10.2633333+00:00

minerva1013

Following up to check if the resolution provided was helpful. Let us know if you need any further assistance.

1 answer

Your answer

Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-13T08:12:37.4266667+00:00

minerva1013

Thank you for reaching out to Microsoft Q&A.

Based on the details you’ve shared, this appears to be a tenant lockout scenario.

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: https://learn.microsoft.com/en-us/partner-center/customers/gdap-preventing-tenant-lockouts

If neither option is possible let us know, we are happy to assist you further!
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator

2026-05-14T06:59:10.2633333+00:00

minerva1013

Following up to check if the resolution provided was helpful. Let us know if you need any further assistance.

Answer 1

Yes. When the only global administrator has lost or can’t use the MFA method and can’t access the admin portals, MFA can be reset by Microsoft’s Data Protection team.

Process summary:

Confirm there is no other global admin
- If there were another global administrator, that admin could sign in to the Microsoft Entra admin center and select the affected user → Authentication methods → Require re-register multifactor authentication to reset MFA.
- In this scenario, there is only one global admin, so this option is not available.
Contact Microsoft Support and reach the Data Protection team
- Use the official Customer service phone numbers - Microsoft Support channel referenced in the documentation.
- When calling, clearly state:
  - The issue is with Authenticator / MFA.
  - The product is Office 365 / Microsoft 365 for business or Microsoft Entra ID.
  - It is a company/organization account.
  - The caller is the only global administrator and is locked out due to lost/unusable MFA.
  - A service request is needed and must be routed to the Data Protection team (or Tenant Recovery/Data Protection) to reset MFA for the tenant admin.
- The Data Protection team will use their verification process (tenant ownership and identity checks) and, once validated, can reset the MFA registration for the global admin so a new MFA method can be configured.
Alternative escalation path if phone support cannot be reached
- Create a temporary trial tenant (for example, a Microsoft 365 trial) and sign in as its admin.
- From that new tenant’s admin center, open a support ticket explaining that access to a different, existing tenant is lost because the only global admin’s MFA is unavailable.
- Ask that the case be escalated to the Data Protection team for MFA reset and tenant recovery on the original tenant.

After Data Protection completes the process and resets MFA, sign in again to the original tenant, re-register MFA (for example, Microsoft Authenticator), and consider adding additional authentication methods to avoid future lockouts.

References: