Lost authenticator for Microsoft Entra

Ryan Luu

Based on the details you’ve shared, this appears to be a tenant lockout scenario. 

To resolve this, the recommended approach is to contact the Microsoft Data Protection team. You can reach them by calling Microsoft Customer Service using the phone numbers listed here: https://support.microsoft.com/en-us/topic/customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

If you have access to another tenant or subscription where you still have Global Administrator privileges, you may also raise a support request from there to get assistance in restoring access to the affected tenant.

For future reference and to help prevent tenant lockouts, please check: https://learn.microsoft.com/en-us/partner-center/customers/gdap-preventing-tenant-lockouts

If neither option is possible, let us know, we are happy to assist you further!

I called, and they no longer offer support over the phone and directed me to a website I can't use because it requires a login to my locked-out account.

Ryan Luu

Were you able to log the support ticket with Microsoft Data Protection team or still facing the issues?

Hello,

Since you are the only administrator in the Microsoft Entra tenant and no longer have access to the Microsoft Authenticator app, this becomes an account recovery and MFA reset scenario.

Unfortunately, if there are no alternative authentication methods configured (SMS, alternate phone, backup codes, another admin account, etc.), you will not be able to bypass MFA yourself.

Here are the recommended steps:

1. Try alternative sign-in methods first When prompted for MFA, select:

• “I can’t use my Microsoft Authenticator app right now”
• “Use another verification method”

Check whether:

• SMS
• Phone call
• Backup authentication method
• Another signed-in device/session

is still available.

1. Check existing signed-in sessions If you are still signed in anywhere:

• Azure Portal
• Microsoft 365 Admin Center
• Outlook
• Another browser/device

immediately:

• Add a new MFA method
• Disable/re-register Authenticator
• Create another Global Admin account for backup

1. Contact Microsoft Support for MFA reset Since you cannot create a support ticket from the affected account, use: Microsoft Support Contact

You may also need: Azure Support

Explain clearly that:

• You are the only tenant/global administrator
• The Authenticator device was lost
• You cannot access the tenant to create a support request

1. Prepare proof of ownership Microsoft’s Data Protection / Account Recovery team may request:

• Tenant domain name
• Subscription/billing details
• Azure subscription ID
• Business verification information
• Identity verification documents

Once ownership is verified, Microsoft can assist with resetting the MFA methods on the administrator account.

For future protection, it is strongly recommended to:

• Configure multiple MFA methods
• Create at least one backup Global Administrator account
• Store recovery information securely
• Enable additional recovery options besides Authenticator only Hello, Since you are the only administrator in the Microsoft Entra tenant and no longer have access to the Microsoft Authenticator app, this becomes an account recovery and MFA reset scenario. Unfortunately, if there are no alternative authentication methods configured (SMS, alternate phone, backup codes, another admin account, etc.), you will not be able to bypass MFA yourself. Here are the recommended steps:
  • Try alternative sign-in methods first
    When prompted for MFA, select:
• “I can’t use my Microsoft Authenticator app right now”
• “Use another verification method”

Check whether:

• SMS
• Phone call
• Backup authentication method
• Another signed-in device/session

is still available.

1. Check existing signed-in sessions
   If you are still signed in anywhere:

• Azure Portal
• Microsoft 365 Admin Center
• Outlook
• Another browser/device

immediately:

• Add a new MFA method
• Disable/re-register Authenticator
• Create another Global Admin account for backup

1. Contact Microsoft Support for MFA reset
   Since you cannot create a support ticket from the affected account, use:
   Microsoft Support Contact

You may also need:
Azure Support

Explain clearly that:

• You are the only tenant/global administrator
• The Authenticator device was lost
• You cannot access the tenant to create a support request

1. Prepare proof of ownership
   Microsoft’s Data Protection / Account Recovery team may request:

• Tenant domain name
• Subscription/billing details
• Azure subscription ID
• Business verification information
• Identity verification documents

Once ownership is verified, Microsoft can assist with resetting the MFA methods on the administrator account.

For future protection, it is strongly recommended to:

• Configure multiple MFA methods
• Create at least one backup Global Administrator account
• Store recovery information securely
• Enable additional recovery options besides Authenticator only

@Shubham Sharma

I am unable to open a ticket with the Microsoft Data Protection team because the phone system insists I visit http://aka.ms/pro, but I can't log in because I don't have access to my work account, and the site only allows work accounts and not personal.