Fix Microsoft Authenticator Account Access and Suspicious Devices
Question details
The user is locked out of their Microsoft account due to missing verification codes or an unauthorized, suspicious device registered to their Microsoft Authenticator.

- Product
- Microsoft Authenticator
- Device & OS
- not provided
- Scenario
- Attempting to log in to a Microsoft account or manage authentication methods when the primary MFA device is compromised or unavailable.
- Observed behavior
- Verification codes are not appearing, or a suspicious device is registered to the account, preventing the user from signing in and making it difficult to remove or replace the Authenticator setup.
Gather any alternative authentication methods you previously set up, such as a backup email address or phone number, and ensure you perform the recovery process from a familiar, trusted device and network.
Use Microsoft Account Recovery for Personal Accounts
Recover your personal Microsoft account using alternative verification methods to bypass the suspicious Authenticator device.
If an unauthorized device was registered to your personal Microsoft account, you must bypass it using alternative verification methods to regain access and revoke the rogue device's permissions.
Navigate to the Microsoft account sign-in page on a known, trusted device. Enter your email and password. When prompted for an Authenticator code, click 'Sign in another way' or 'I don't have these any more'.
Select an alternative verification method, such as receiving a code via SMS to your backup phone number or an email to your recovery address, and enter the code.
Once logged into your Microsoft Account dashboard, navigate to the 'Security' tab and click 'Sign-in activity' to review where and when the suspicious access occurred.
Go to 'Advanced security options'. Locate the suspicious Microsoft Authenticator device under your sign-in methods, select 'Remove', and then immediately register your current, trusted device.

Contact Microsoft Entra Administrator for Work/School Accounts
For organizational accounts, only your IT administrator can reset your MFA methods and force the removal of unauthorized devices.
Try WPS Office for a Hassle-Free Document Experience
If Microsoft account lockouts, authentication loops, or complex MFA requirements are preventing you from accessing your important work, consider switching to WPS Office. It provides a lightweight, locally accessible suite for your documents, spreadsheets, and presentations without mandatory cloud sign-ins or restrictive access barriers.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install WPS Office: Run the setup file and follow the straightforward on-screen instructions to install the suite locally on your device.
- 3. Access Files Locally: Launch WPS Office and open your existing Word, Excel, or PowerPoint files directly from your hard drive, bypassing cloud account lockouts.

Frequently Asked Questions
What should I do if I receive a Microsoft Authenticator prompt I didn't request?
Never approve unexpected sign-in requests. Deny the request immediately within the Authenticator app, then log into your Microsoft account settings to change your password and review your recent sign-in activity for unauthorized access attempts.
Can I remove a suspicious device from Microsoft Authenticator without logging into my account?
No, you must be able to securely log in to your Microsoft account's security dashboard to manage and remove linked devices. If you cannot log in, you must use the account recovery process or contact your organization's IT administrator.
Why am I not receiving verification codes in my Authenticator app?
Missing codes can occur if app notifications are disabled, your device lacks an active internet connection, or the account is no longer properly synced. You can open the app manually to view the time-based generated codes even while offline.
How long does Microsoft account recovery take if I don't have my Authenticator app?
If you must use the automated Microsoft account recovery form because all backup verification methods are lost, the review process can take up to 30 days to protect against unauthorized account takeovers.




