Fix Microsoft 365 Administrator Account Locked by Authenticator
Question details
A global administrator is locked out of their Microsoft 365 account because the Microsoft Authenticator app is unavailable, and setting up a new app requires a QR code generated from the locked account.

- Product
- Microsoft 365 / Microsoft Authenticator
- Device & OS
- not provided
- Scenario
- Attempting to log in to an administrator account or recover the Microsoft Authenticator app on a new device.
- Observed behavior
- The user is trapped in a loop where accessing the account requires an Authenticator code, but setting up the Authenticator app requires logging into the account to scan a QR code.
Gather your company's domain name, active subscription details, and billing information, as Microsoft support will require these to verify your identity as the global administrator.
Contact Microsoft Data Protection Team for an MFA Reset
Since this is an administrator account and you are caught in an MFA loop, you must contact Microsoft's Data Protection team over the phone to manually reset your multifactor authentication.
Because community forums and automated systems cannot access private admin account information or reset MFA, you must speak directly with Microsoft support. If you are the sole global administrator for your tenant, this is the only way to break the Authenticator loop.
Find the Microsoft 365 Business Support phone number for your specific country or region on the official Microsoft documentation site and call them.
When prompted by the automated system, select 'Business Support', then choose 'Microsoft Authenticator', and finally route your call to 'Data Protection'.
Once connected to a representative, state clearly that you are the Global Administrator and that you need to open a service request to reset your MFA.
Provide your company domain, billing information, and subscription details to the support representative so they can securely verify your identity and initiate the reset process.

Looking for a Hassle-Free Office Suite? Try WPS Office
While waiting for your Microsoft 365 administrator account to be unlocked, you can continue your daily work without interruption. WPS Office provides a free, lightweight, and highly compatible alternative to Microsoft Office that does not require complex admin MFA setups just to edit your local documents.
- 1. Download and Install WPS Office: Visit the official WPS Office website to download the free installation package for your operating system.
- 2. Open Your Existing Files: Launch WPS Office and click 'Open' to select your existing Word, Excel, or PowerPoint files without needing a Microsoft account.
- 3. Edit and Save Seamlessly: Make your edits using the familiar interface and save your documents in their original formats to share with others.

Frequently Asked Questions
Can I reset the Microsoft Authenticator app without my old phone?
Yes, but only if you previously enabled Cloud Backup for your Authenticator app credentials, or if another global administrator in your organization can log into the Microsoft Entra admin center to require re-registering your MFA.
Why does Microsoft Authenticator ask for a QR code?
The QR code contains a unique secret key linking your account to the Authenticator app on that specific device. If you lose the app and try to set it up again, the system requires this code to prove authorization.
How long does the Microsoft Data Protection team take to unlock an admin account?
Because it involves strict security verification to prevent unauthorized access, it can take anywhere from a few hours to several business days for the Data Protection team to fully verify your identity and complete the MFA reset.
Can the Microsoft community forums help reset my admin MFA?
No. For security and privacy reasons, forum members, community moderators, and standard support agents do not have access to backend account data and cannot reset multifactor authentication for any user.




