Fix Microsoft Authenticator Locked by an Expired Account
Question details
The user needs to know how to regain access to their Microsoft Authenticator app, which completely locked up after a single connected Microsoft 365 account (managed by GoDaddy) expired.
- Product
- Microsoft Authenticator / Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to retrieve two-factor authentication codes for various personal and professional accounts stored in Microsoft Authenticator.
- Observed behavior
- The expiration of a single Microsoft 365 account unexpectedly locks the entire Authenticator application, preventing access to all other perfectly valid Microsoft and non-Microsoft verification codes.
Verify your account's management provider by checking if you log in through the standard Microsoft 365 admin portal or a third-party partner dashboard like GoDaddy.
Reactivate the Expired Account via Your Provider
The most immediate way to unblock the Microsoft Authenticator app is to resolve the billing or subscription issue with the expired account that is triggering the lockout.
Because organization-level security policies can force the Authenticator app to check the active status of an account upon launch, an expired account can halt the entire app interface.
Determine whether the locked Microsoft 365 email account is billed directly through Microsoft or managed by a third party like GoDaddy.
Navigate to the GoDaddy login page (or Microsoft 365 Admin Center) on a web browser and sign in to access your billing and subscription settings.
Follow the prompts in the billing section to renew the expired Microsoft 365 license and ensure the account is listed as active.
Force close the Microsoft Authenticator app on your mobile device and reopen it. Access to all your stored verification codes should now be restored.
Adjust Microsoft Entra Security Defaults (For Admins)
If you have administrative access to the Microsoft 365 tenant, you can modify security defaults or Conditional Access policies that might be forcing the app lockout.
Looking for a Hassle-Free Office Suite? Try WPS Office
While you are locked out of your Microsoft 365 account and resolving Authenticator issues, you can continue your productivity uninterrupted with WPS Office. It is a free, robust alternative that does not rely on complex organizational account authentications to let you view and edit your essential documents.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install the Software: Run the downloaded file and follow the quick on-screen instructions to install the suite.
- 3. Open Your Files: Double-click your existing Microsoft Office files to open them directly in WPS Office and resume your work instantly.
Frequently Asked Questions
Why does an expired Microsoft 365 account lock the entire Authenticator app?
In certain managed environments, organization-level security policies (like those managed by GoDaddy or strict Conditional Access policies in Microsoft Entra) require the app to verify the active status of the account upon launch. When the account expires, the verification fails, inadvertently locking the app interface and blocking access to other unrelated accounts.
Can I retrieve my other MFA codes if Microsoft Authenticator is locked?
Unfortunately, if the application is fully blocked by a mandated security check tied to the expired account, you cannot access your other verification codes. You must either resolve the billing issue with the expired account or contact your IT admin to adjust the security policy.
How do I remove an expired account from Microsoft Authenticator?
If you can get past the initial app launch screen, tap the expired account in the list, tap the gear icon, and select 'Remove account'. However, if the entire app is locked upon opening, you will not be able to reach this menu until the account is reactivated.
Will reinstalling Microsoft Authenticator fix the locked app issue?
Reinstalling the app may remove the expired account and bypass the lockout, but it will also wipe all other verification accounts stored in the app unless you have previously enabled cloud backup for Authenticator. Doing this without a backup will lock you out of all your MFA-protected services.
