Fix Microsoft 365 Administrator MFA Sign-In Error
Question details
A Microsoft 365 organization administrator is unable to sign in due to a Microsoft Authenticator error and cannot receive the required verification code.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Signing into a Microsoft 365 global or tenant administrator account.
- Observed behavior
- Microsoft Authenticator displays a sign-in error and requests a verification code that the user cannot obtain, completely locking the administrator out of the account.
Ensure you have your Microsoft 365 tenant ID, domain name, and alternative contact information ready, as you may need to verify your identity with another admin or Microsoft Support.
Use an Alternative Verification Method
If you have previously set up backup authentication methods, you can bypass the Authenticator app error.
This is the fastest way to regain access if you have a backup phone number or alternative email address registered with your admin account.
On the Microsoft 365 sign-in page, click on 'Use a different verification method' or 'I can't use my Authenticator app'.
Select an available alternative method from the list, such as receiving a code via SMS text message or an alternate email address.
Input the code you receive to successfully sign in to your administrator account.

Ask Another Administrator to Reset Your MFA
Another global or authentication administrator in your tenant can reset your MFA settings to allow you to re-register your device.
Contact Microsoft Data Protection Team
If you are the sole global administrator and cannot use alternative methods, you must contact Microsoft Support to regain access.
Work Without Cloud Disruptions Using WPS Office
Cloud lockouts and complex MFA errors can bring your work to a standstill. WPS Office offers a reliable, lightweight, and free alternative to Microsoft Office, allowing you to edit documents locally without mandatory cloud sign-ins.
- 1. Download the software: Visit the official WPS website to download the free installation package.
- 2. Install WPS Office: Run the installer and complete the quick setup process on your computer.
- 3. Open and edit files immediately: Open your existing Microsoft Office files locally and start working without needing an internet connection or cloud authentication.

Frequently Asked Questions
How long does it take for Microsoft Support to unlock a sole admin account?
It can take several days or even up to a couple of weeks. The Microsoft Data Protection team must follow strict security protocols and verify your identity thoroughly before granting access to a tenant's global administrator account.
How can I prevent being locked out of my sole admin account in the future?
Microsoft highly recommends creating an emergency access or 'break-glass' administrative account. This is a highly secure account excluded from specific Conditional Access MFA policies, ensuring you always have a backdoor if your main account is locked out.
Can I disable MFA for Microsoft 365 administrator accounts?
While it is technically possible by turning off Security Defaults or adjusting Conditional Access policies, Microsoft strongly discourages disabling MFA for administrators due to the severe security risks associated with compromised admin credentials.




