Fix Microsoft 365 Administrator MFA Authentication Code Not Working
Question details
The sole Microsoft 365 administrator is locked out of the admin center because the MFA authentication code fails to verify, and standard support channels have not resolved the issue.
- Product
- Microsoft 365 Admin Center
- Device & OS
- not provided
- Scenario
- Attempting to log into the Microsoft 365 admin center as the sole administrator for the organization.
- Observed behavior
- The MFA authentication code fails, preventing access to the tenant admin center, and standard phone or email support cannot bypass the security restriction.
Ensure you have your company's Microsoft 365 subscription details, billing information, and proof of domain ownership readily available before contacting support.
Escalate to the Microsoft Data Protection Team
Because standard support cannot reset MFA for the sole administrator of a tenant, you must escalate your case to the specialized Data Protection Team for manual verification.
When the sole administrator is locked out of a Microsoft 365 tenant due to MFA failure, standard tier-1 support agents cannot bypass the security protocols. Only the Data Protection Team has the authority to verify your identity and reset MFA settings for tenant administrators.
Dial the Microsoft business phone support number designated for your region or country.
Use the automated voice options and select 'Office 365 for business', then 'Company account', and specify that you are an 'Administrator'.
When prompted for the specific issue, mention 'Authenticator' or 'MFA login issues' and confirm that there is 'No other administrator' available on the account.
Once connected to a support agent, explicitly request to have your service ticket escalated to the Data Protection Team for an administrator MFA reset.
Supply your company name, subscription ID, billing information, and ownership details. If you use a third-party IT provider, ensure the authorized account owner is present on the call to authorize the request.
Looking for a Reliable Office Alternative? Try WPS Office
While you wait for Microsoft's Data Protection Team to restore your admin access, you can keep your business running smoothly with WPS Office. It is a free, lightweight alternative that is highly compatible with Microsoft formats, ensuring your team can still work on important documents, spreadsheets, and presentations without interruption.
- 1. Download WPS Office: Visit the official WPS website and download the free desktop application for your operating system.
- 2. Install the Suite: Run the lightweight installer to quickly set up the office suite on your computer.
- 3. Open Existing Documents: Double-click your existing Microsoft Office files to open them directly in WPS Office and continue working immediately.

Frequently Asked Questions
Why is my Microsoft 365 administrator authentication code failing?
This can occur if the device time on your phone is out of sync, the authenticator app was uninstalled and reinstalled, or the account connection token became corrupted. As the only admin, fixing this requires intervention from Microsoft's Data Protection Team.
Can another user in my organization reset my administrator MFA?
No, standard users cannot reset an administrator's MFA settings. If your organization had a second global administrator, they could reset it for you, but since you are the sole admin, you must contact Microsoft support.
How long does the Microsoft Data Protection Team take to resolve an MFA lockout?
Resolving an administrator lockout can take anywhere from 24 hours to a few weeks. The team must perform stringent security and identity checks to ensure they are not granting access to unauthorized users.
What information is required to prove ownership of the Microsoft 365 tenant?
You will generally need to provide the original sign-up email address, billing invoices, company registration details, and potentially add a specific TXT record to your domain's DNS settings to prove you own the associated domain.




