A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
For a business account where the password works but Microsoft Authenticator no longer provides codes, the issue is with multi-factor authentication (MFA) on the tenant. Resolution depends on whether there is another admin and whether this is a work/school (Microsoft 365) account.
- If this is a work/school Microsoft 365 business account and there is another admin:
- Another global admin must sign in to the Microsoft Entra admin center (https://entra.microsoft.com).
- Go to Users → All users → [your user] → Authentication methods.
- Use Require re-register multifactor authentication to reset MFA.
- Next sign-in will prompt to set up Authenticator again on the mobile device.
- If this is a work/school Microsoft 365 business account and there is no other admin (sole admin scenario):
- This requires Microsoft Data Protection team involvement; forum/support agents cannot directly change MFA or send codes.
- Call Microsoft using the Customer service phone numbers for the region (see “Customer service phone numbers - Microsoft Support” in the referenced Q&A answers).
- When navigating the IVR, clearly state that this is an Office 365 for business account, that the caller is the only administrator, and that an MFA / Authenticator reset is needed. Example flow from the Q&A guidance:
- When asked what the problem is: say “Authenticator” or “lost account”.
- Product: “Office 365 for business”.
- Type: “company account”.
- Are you an administrator?: “Yes”.
- Any other admins?: “No”.
- Do you need a service request?: “Yes – I need to speak with the Data Protection team about an admin MFA reset.”
- The frontline should create a ticket and route it to the Data Protection team, who have the tools to verify identity and reset the admin’s MFA.
- If support is hard to reach via phone (alternative escalation path):
- Create a temporary trial Microsoft 365 tenant (as described in the referenced Q&A answers) just to gain access to an admin center where a support ticket can be opened:
- Sign up for a Microsoft 365 trial plan and complete tenant setup.
- Go to Microsoft 365 Admin Center → Help & support.
- Open a support ticket explaining that access is needed to a different existing tenant where the caller is the sole admin but locked out due to Authenticator/MFA.
- Request escalation to the Data Protection team for that original tenant.
- After the original tenant issue is resolved, cancel the trial subscription to avoid charges.
- Create a temporary trial Microsoft 365 tenant (as described in the referenced Q&A answers) just to gain access to an admin center where a support ticket can be opened:
- While waiting on the existing ticket (SIR23556889):
- There is no supported way for community or front-line agents to bypass MFA or send verification codes; this is by design to protect the account.
- If any alternative verification methods (SMS, email, security key) are configured and still accessible, try those at sign-in instead of Authenticator.
Because this is a business tenant and the password works but MFA is blocking access, the only supported resolution path when no other admin can reset MFA is via Microsoft’s Data Protection process through phone support or a support ticket from another tenant, as outlined above.
References:
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
- I need to speak with a real person and it seems impossible. - Microsoft Q&A
- Troubleshoot Microsoft verification code issues
- Help with the Microsoft account recovery form