MFA & Verification Issues

How to Fix Microsoft 365 Admin Cannot Sign In After Losing Authenticator Phone

WPS Content Manager Sep 28, 2026 869 views

Question details

The Microsoft 365 global administrator has lost their authenticator device and needs an MFA reset to regain access to the account.

How to Fix Microsoft 365 Admin Cannot Sign In After Losing Authenticator Phone

Product: Microsoft 365
Device & OS: not provided
Scenario: Attempting to sign in to a Microsoft 365 admin account without access to the smartphone hosting the Microsoft Authenticator app.
Observed behavior: The administrator is permanently blocked from signing in at the multifactor authentication prompt, even if email verification codes are received, due to tenant security policies.

Before you start

Check if there is another active global administrator on your Microsoft 365 tenant, and gather your subscription details, domain information, alternate email, and phone number before contacting support.

Solution 1Recommended

Ask Another Global Administrator to Reset MFA

If your organization has more than one global administrator, the secondary admin can easily reset your multifactor authentication methods from the backend.

Having a fallback or "break-glass" global admin account is a Microsoft best practice for this exact scenario. The secondary admin can force your account to re-register MFA upon your next sign-in.

Sign in as secondary admin

Have the other global administrator sign in to the Microsoft Entra admin center or Microsoft 365 Admin Center using their active credentials.

Locate the locked out user

Navigate to the 'Users' menu and select 'All users'. Search for and click on your locked-out administrator account.

Reset Authentication methods

Click on 'Authentication methods' in the left-hand navigation pane for that user profile, then click 'Require re-register MFA'. This will wipe the lost phone's association.

Sign in and set up new authenticator

Sign in with your admin credentials. You will be prompted to set up multifactor authentication again. Scan the new QR code with the authenticator app on your new device.

Ask Another Global Administrator to Reset MFA

Best Practice: Always maintain at least two global administrator accounts in your tenant to prevent total lockouts.

Solution 2

Contact Microsoft 365 Support for Data Protection Escalation

If you are the sole global administrator, you must call Microsoft Support to verify your identity and have the Data Protection team perform a backend MFA reset.

Free Microsoft Office alternative

Try WPS Office as a Lightweight Alternative

While you wait for Microsoft Support to reset your tenant's MFA, you can continue working on your important documents locally using WPS Office. It is a highly compatible, free Office suite that doesn't rely on complex cloud admin centers for basic document editing.

1. Download the installer: Visit the official WPS Office website and click the free download button for your operating system.
2. Install the software: Run the downloaded installer and follow the on-screen prompts to complete the setup in minutes.
3. Open and edit your files: Launch WPS Office and open your existing .docx, .xlsx, or .pptx files to continue working seamlessly without cloud sign-in barriers.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.No complex admin center or tenant MFA lockouts for basic local document editing.Lightweight installation with a familiar, easy-to-use tabbed interface.Free to use for daily office productivity needs.

microsoft office alternative - wps office

Frequently Asked Questions

Can Microsoft community moderators reset my Microsoft 365 MFA?

No. Community moderators and forum support staff do not have access to backend tenant resources and cannot reset multifactor authentication for Microsoft 365 Business accounts due to strict security policies.

Why am I still blocked if I receive a verification code by email?

Microsoft 365 tenant security defaults often require app-based authentication (like the Microsoft Authenticator app) or SMS. An email verification code alone is usually insufficient to bypass the primary MFA requirement for global admin accounts.

What information do I need to verify my identity with Microsoft support?

You should be prepared to provide your tenant domain name (ending in .onmicrosoft.com), your subscription details, the alternate email address registered to your admin account, and the phone number on file.

How long does it take for Microsoft Data Protection to reset MFA?

The timeframe can vary significantly. While some requests are handled within 24 to 48 hours, high volume periods can result in wait times of a week or more. It is critical to obtain a ticket number and follow up regularly.

Login & Account Issues