Microsoft 365 Admin Locked Out by Authenticator

Question

Microsoft 365 Admin Locked Out by Authenticator

I am the Microsoft 365 administrator for our organization and I recently changed my phone.

I no longer have access to the Microsoft Authenticator app that was registered on my previous device. When I try to sign in to Microsoft 365, Microsoft Entra Admin Center or the Security Info page, I am asked to approve the sign-in or enter a code from Microsoft Authenticator.

The problem is that I cannot access the Authenticator for this account on my new phone because signing in to Authenticator itself also requires verification through the old Authenticator.

There are no alternative verification methods available for my account.

I still have access to some Microsoft 365 services on my laptop through an existing session but I cannot access the Admin Center or authentication settings because MFA is requested again.

I am also the administrator and therefore cannot reset my own MFA through the Admin Center.

Could you please advise what recovery options are available in this situation?

Specifically:

How can I reset or re-register Microsoft Authenticator if I cannot access the old device?
Is there a recovery process for an administrator who is locked out by MFA?
If I am the only administrator with the required privileges, how can I contact Microsoft to restore administrative access to the tenant?
Is there any way to use my existing authenticated session on the laptop to reset the MFA method?

Thank you for your guidance.

0 comments

1 answer

Your answer

Answer 1

Hi Владислав,

From what you've described, it sounds like your Multi-Factor Authentication (MFA) setup may need to be reset. This can sometimes happen after switching to a new device, replacing a phone, or reinstalling the Microsoft Authenticator app. Since your new device hasn't been registered yet, the authentication requests may still be linked to your previous device, which can leave you stuck in a sign-in loop.

And regarding your questions:

Reset/re-register Authenticator: Since you do not have access to the old device and appear to be the only admin, Microsoft support will need to assist with resetting your MFA methods.
Admin MFA recovery: Yes. Microsoft's Data Protection team can help recover access after verifying tenant ownership.
Contacting Microsoft: Since you cannot access the Admin Center, you'll need to contact Microsoft support directly or work with your reseller/partner to open a support request on your behalf.
Using the existing laptop session: Generally no. Resetting MFA typically requires a new authentication challenge, so an existing session usually cannot be used to re-register Authenticator.

If your account is also an admin account and there are no other available global administrators in your tenant, then the only way to regain access is contact Microsoft support. Please try locating the appropriate hotline for your region here: Customer service phone numbers - Microsoft Support

In this situation, the Microsoft Data Protection team has tools and processes in place to verify identity and regain access to administrator accounts.

Here are some tips and an example of a prompt to help you navigate the IVR more effectively:

(When you call the support number, you may hear an introduction of about 30 seconds such as "you can visit the link...". You can ignore this introduction and wait until you are presented with the options. Then press "1" as a business email user, and again "1" for technical help.)

In some regions, the initial interaction may be automated, so here’s a general idea of how the conversation might go to help you prepare:

What kind of problem are you experiencing?
Answer: Authenticator
What products do you use?
Answer: Office 365 for business
Is this for an education or company account?
Answer: For companies
Are you an administrator?
Answer: Yes
Are there any other administrators in your organization?
Answer: No. I am the only admin in my tenant
Do you need a... Service request?
Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

During the phone call, you will need to provide the information associated with your subscription, such as your company name, billing details, phone number, and an alternate email address, etc. This information allows the Data Protection team to verify your identity and securely assist you in regaining access to your administrator account.

If you're unable to reach a live support agent through your existing tenant, another option is to create a temporary Microsoft 365 trial tenant. This can provide access to the Microsoft 365 Admin Center, where you can open a support request and explain that you need assistance recovering access to a different tenant.

To create a temporary tenant, visit: Microsoft 365 Business Plans and Pricing | Microsoft 365. This would allow you to create a new tenant following the prompts provided. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Follow the guided setup process to create a new account for a new tenant.

Once your tenant is created, you should be able to access the support portal and submit your ticket referencing your locked account without further issues.

In your ticket description, you'll need to clearly explain that you're trying to regain access to your previous Microsoft 365 tenant and need help from the Data Protection team. Here's a message you can use or adapt:

"Hello, I’m currently unable to access my previous Microsoft 365 tenant due to losing MFA access, which prevents me from receiving verification codes. I’m the global admin, but I’m locked out and unable to generate a QR code or bypass MFA.

I created this new tenant solely to request assistance. I kindly ask to be connected with the Data Protection team to verify my identity and help me recover access to the original tenant.

This is urgent, as I rely on Microsoft 365 for my work and have been unable to operate for several days. I’m available to provide any documentation or verification needed to support the recovery process."

Ticket Support: In the Microsoft 365 Admin Center > Support > Help & Support.

Please remember to cancel the trial subscription after your issue is resolved, as this will help you avoid any accidental billing. You may prefer the following resource for detailed instructions: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

If your organization's subscription is from a partner or reseller: Contact the reseller's support provider to help open a service request on behalf of you instead.

I hope this helps point you in the right direction. If you have any updates or additional questions, feel free to reply back and I'll do my best to assist further.

Best regards,