MFA & Verification Issues

How to Change MFA Phone Number When the Only Admin Is Locked Out

Maira Mehtab Sep 21, 2026 868 views

Question details

The user needs to update their multifactor authentication (MFA) phone number because codes are being sent to an incompatible landline.

Product: Microsoft 365 Admin Center
Device & OS: not provided
Scenario: The user is attempting to sign in to the sole administrator account for their organization but is blocked by an MFA prompt sending SMS codes to a landline.
Observed behavior: The user is completely locked out of the account because they cannot receive the SMS verification code, and they cannot access support portals since those require administrator sign-in.

Before you start

Gather your tenant details, registered domain name, and any proof of account ownership before proceeding, as strict verification is required to regain admin access.

Solution 1Recommended

Use an Alternative Authentication Method

Check if a secondary authentication method was previously configured on the account to bypass the phone number requirement.

If you previously set up an alternative verification method, you can use it to sign in and manually update your phone number settings.

Select alternative sign-in

On the MFA prompt screen, look for and click the 'Sign in another way' or 'I can't use my Microsoft Authenticator app right now' link.

Choose a backup method

If available, select an alternative method such as a secondary email address or an Authenticator app to receive your verification code.

Update your MFA settings

Once signed in, navigate to your account security settings and update the authentication phone number to a valid mobile device.

Solution 2

Contact Support via Phone for Sole Admins

If no alternative methods are available, you must contact support by phone to reach the Data Protection team for manual account recovery.

Free Microsoft Office alternative

Looking for a Hassle-Free Office Suite? Try WPS Office

While recovering from strict administrator lockouts can be a tedious process, managing your daily documents doesn't have to be. WPS Office offers a free, lightweight, and highly compatible alternative to Microsoft Office, without the complex enterprise admin overhead for individual or small team setups.

Fully compatible with Microsoft Office file formats (DOCX, XLSX, PPTX).Free to use with a lightweight installation and fast startup.Intuitive interface familiar to Office users for a seamless transition.Built-in PDF editing and local file management without requiring complex enterprise accounts.

Frequently Asked Questions

How can I prevent a sole administrator lockout in the future?

It is highly recommended to create a dedicated 'break-glass' or emergency access global administrator account. This account should use a different MFA method (or be excluded from conditional access policies) and its credentials should be stored securely.

Can regular users contact support to bypass MFA?

No. If a regular user is locked out, they must contact their organization's IT administrator to have their MFA sessions revoked and settings reset. Support will only assist global admins with account lockouts.

Why doesn't MFA work with my landline?

Standard SMS verification codes cannot be delivered to traditional landlines. If you must use a landline for MFA, ensure your authentication system is configured to use a voice call verification method rather than SMS text messages.

Login & Account Issues