A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
If the old phone is broken and Microsoft Authenticator cannot be used on it, the account must be recovered or MFA methods updated using the options still available.
- If still signed in somewhere (PC or browser)
- Go to the Security info / Additional security verification page for the account (for work/school accounts this is described in the "Additional security verification" page flow).
- Remove the old Microsoft Authenticator method.
- Add a new sign-in method (phone or Authenticator on the new device), then follow the prompts to scan the QR code in the new Authenticator app.
- If this is a work or school account and sign-in is not possible anywhere
- Another admin in the organization must reset MFA for the account so Authenticator can be set up again.
- If there is only one admin and that admin is locked out, Microsoft’s Data Protection team must be involved via a support ticket raised through Microsoft Support. This is the documented path when a sole global admin is locked out due to Authenticator/MFA issues.
- If this is a personal Microsoft account and sign-in is still possible on a PC
- Sign in to the Microsoft account security page.
- Under Security info, remove the old Authenticator app entry.
- Add Authenticator app again and configure it on the new phone.
- If no device is signed in and no alternative MFA method works
- Use the account recovery options presented on the sign-in page (email/SMS/other methods).
- If none of them work and this is a work/school tenant where there is only one admin, contact Microsoft Support and request escalation to the Data Protection team as described in the referenced tenant-lockout guidance.
Once access is restored and Authenticator is working on the new phone, remove any old devices or methods that are no longer used so future notifications do not go to an unavailable device.
References:
- Use a screen reader to set up and troubleshoot multifactor authentication
- Troubleshoot problems with Microsoft Authenticator
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- Authenticator locked and cannot access at all after replacing phone - Microsoft Q&A