Unable to access Microsoft 365 tenant – Lost MFA device (Sole Global Administrator)

Antonio Jesús 20 Reputation points
2026-07-16T14:09:19.24+00:00

Hello,

I am the sole Global Administrator of my Microsoft 365 Business tenant.

I can successfully sign in with my username and password, but I cannot complete the multi-factor authentication (MFA) because my Microsoft Authenticator app no longer contains the valid credentials for my work account.

Here is what happened:

I created the Microsoft 365 tenant myself about one year ago.

The tenant uses the default .onmicrosoft.com domain.

I am the only Global Administrator.

I recently changed my mobile phone.

My previous phone stopped working permanently and I no longer have access to it.

Microsoft Authenticator restored the account name on my new phone, but it does not generate a 6-digit verification code and it does not receive push notifications.

The only authentication methods offered during sign-in are:

Enter a 6-digit code from Microsoft Authenticator.

  Approve a notification in Microsoft Authenticator.
  
  No other verification methods (SMS, email, phone call, recovery code, or security key) are available.
  

Because of this, I am completely locked out of my Microsoft 365 administrator account.

I currently need access to my tenant to retrieve invoices and manage my Microsoft 365 subscription.

Could you please verify my identity and reset the MFA authentication methods for my Global Administrator account so that I can register Microsoft Authenticator again on my new device?

Thank you for your assistance.

Microsoft 365 and Office | Subscription, account, billing | For business | Windows
0 comments No comments

Answer accepted by question author
Anonymous
2026-07-16T15:43:01.59+00:00

Hi Antonio

Thank you for reaching out and I'm sorry to hear you're having trouble logging into your Microsoft account.    Changing to a new phone often triggers this issue because your Multi-Factor Authentication (MFA) settings usually need to be reset. When you switch devices or reinstall the Microsoft Authenticator app, your new phone isn’t automatically configured for authentication. Since the app is still tied to your previous device, you’re unable to receive authentication codes on the new one, which is why you can’t access your account right now. 

Just to gently clarify before we go any further, forum moderators do not have the ability to access, modify, or recover user accounts. Due to security and privacy requirements, issues such as sign in failures, password recovery, and multi factor authentication can only be addressed by Microsoft’s dedicated support teams, who have the appropriate tools and authorization to manage account level settings securely. 

These scenarios require identity validation and tools that are strictly handled by dedicated support teams for security reasons. Since you are the only administrator of your tenant and you’re currently unable to sign in, the next essential step is to involve the Microsoft Data Protection team, as they are the only team authorized to help recover an admin account in these circumstances. You can start by calling your regional Microsoft support hotline here: Customer service phone numbers - Microsoft Support    

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.       

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:      

Here are some tips and an example of a prompt to help you reach out the Microsoft Data Protection team support more effectively:   

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)         

In some countries, it is an automated conversation like:  

IVR: What kind of problem are you concerned about?        

You: Authenticator.        

IVR: What kind of product do you use?        

You: Office 365 for business.        

IVR confirmation: education or company account?        

You: For companies        

IVR: Are you an administrator?        

You: Yes.        

IVR: Do you have another administrator in your organization?        

You: No.        

IVR: Do you need a... Service request? 

You: Yes. I need to create a ticket. Please send me directly to the Data Protection Team. 

I truly hope this helps you regain access to your account quickly. Even though I can't directly intervene, directing you to the correct and specialized support is the most effective help I can provide from my position.    

Thank you for your kindness and contributions to the forum.  


If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.     

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Newest
  1. Anonymous
    2026-07-24T20:58:28.7166667+00:00

    Hi Antonio

    Thank you for your update and I'm sorry to hear that you were not able to reach a live agent.

    In this situation, I recommend creating a new tenant to submit a support ticket by signing up for a trial subscription via this link Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant. 

    In your ticket description, you'll need to clearly explain that you're trying to regain access to the previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt: 

    "Hello, I’m currently unable to access my previous Microsoft 365 tenant.

    I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team so that my identity and authorization can be verified, and to help me regain access to the original tenant. 

    This issue is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m fully available to provide any documentation or verification needed to support the recovery process. 

    Thank you, and I look forward to your guidance on how to proceed." 

    Ticket Support: In the Microsoft 365 admin center > Help & Support. 

    It is important to note: Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

    I hope this helps you regain access to the tenant quickly. I'm glad to assist and truly hope the information provided has been useful. Please feel free to reach out anytime if you need further assistance. 

    If you find my post useful, kindly consider upvoting it. Doing so can assist others in the community who may have similar questions in finding solutions more quickly. 

    Thank you for your kindness and contributions to the forum. 

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.