A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
To get back in after changing phones and losing access to Microsoft Authenticator, use the official account recovery and support paths, depending on the type of account.
- If this is a personal Microsoft account (Outlook/Hotmail/Xbox, etc.):
- Start with the Sign‑in Helper, which can detect most sign‑in problems and guide through recovery: use the Sign-in Helper button on the “I can't sign in to my Microsoft account” page.
- If verification codes are not arriving or a method is blocked, follow the guidance in Troubleshoot Microsoft verification code issues and choose another verification method if possible.
- If still locked out, fill in the Microsoft account recovery form as described in Help with the Microsoft account recovery form (linked from the “I can't sign in to my Microsoft account” article). Provide as much accurate info as possible about the account.
- If this is a work or school Microsoft 365/Entra ID account and Microsoft Authenticator is the only admin method:
- If there are other admins in the tenant, another admin must reset the sign‑in methods.
- If there is only one admin and that admin is locked out (common after changing phones), the Microsoft Data Protection team must verify identity and restore access. The recommended path is to contact Microsoft Support by phone via the “Customer service phone numbers - Microsoft Support” page and clearly state that the only global admin is locked out due to Authenticator/2FA. Frontline support will open a ticket with the Data Protection team.
- If direct access to support is blocked, one workaround is to create a temporary Microsoft 365 trial tenant, go to https://admin.microsoft.com as that trial’s admin, then open Support → Help & support and raise a ticket explaining that access is needed to a different, existing tenant where the admin account is locked by 2FA.
- If still signed in somewhere (PC or another device):
- For a personal account, sign in to the Microsoft account security page from that device and either add new security info (phone/email) or temporarily turn off two‑step verification (if possible) before setting up Authenticator again on the new phone.
- For a work/school account, sign in to the My Account / security info page (if accessible) and add a new sign‑in method (e.g., SMS, alternate email) so the new phone can be enrolled.
- If verification codes (SMS/email) never arrive:
- Follow the steps in Troubleshoot Microsoft verification code issues: try a different browser, InPrivate mode, clear cache, try a different network or device, and if still failing, use the Sign‑in Helper and/or account recovery form. Support agents cannot send codes or change security info directly for security reasons.
If none of the above works, the only supported path is to complete the recovery form and/or work with Microsoft Support (or the Data Protection team for single‑admin business tenants) until ownership is verified and access is restored.
References:
- I can't sign in to my Microsoft account
- Troubleshoot Microsoft verification code issues
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- I need to speak with a real person and it seems impossible. - Microsoft Q&A
- Can't sign in to my email - Microsoft Q&A
- Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A