MFA & Verification Issues

How to Fix Microsoft 365 Admin Portal MFA Lockout

Kushani Nimanthika Oct 10, 2026 869 views

Question details

The user is a Microsoft 365 administrator who is locked out of the admin portal because Microsoft Authenticator requires a QR code that can only be accessed from within the locked account.

Product: Microsoft 365 Admin Center
Device & OS: not provided
Scenario: Attempting to sign in to the Microsoft 365 admin account after domain verification, but getting stuck in a two-factor authentication loop.
Observed behavior: The system prompts the user to scan a QR code using Microsoft Authenticator, but the QR code is located inside the admin portal, preventing the user from completing the login process.

Before you start

Ensure you have your Microsoft 365 tenant information, registered domain name, and any alternative contact details ready before reaching out to support.

Solution 1Recommended

Contact the Microsoft Data Protection Team

The most effective way to resolve an admin MFA lockout loop is by contacting Microsoft's backend Data Protection team to reset your tenant's authentication settings.

Because self-service password resets and standard support require signing in, an administrative lockout requires intervention from the Microsoft backend team. The Data Protection team is exclusively responsible for verifying identity and resetting MFA for locked admin accounts.

Visit Microsoft Support

Go to the official Microsoft Support website (support.microsoft.com) without attempting to sign into your locked admin account.

Find the global customer service phone numbers

Since online chat support typically requires you to log in, search for the 'Global customer service phone numbers' page for business users in your region.

Call and request the Data Protection Team

Call the provided business support number. Navigate the automated menu by stating you are completely locked out of your admin account, and explicitly request to be transferred to the Data Protection Team.

Complete identity verification

Provide the representative with your tenant domain and alternative contact information. You will need to wait for them to verify your identity and reset your MFA requirements.

Contact the Microsoft Data Protection Team

Expect Wait Times: The Data Protection team handles highly sensitive security requests. Due to strict verification protocols, it may take a few hours to a few days for them to completely remove the MFA lock on your account.

Solution 2

Use an Alternative Global Administrator Account

If your organization has multiple administrators, another admin can reset your MFA settings from their account.

Free Microsoft Office alternative

Switch to WPS Office for a Hassle-Free Experience

Tired of complex admin portals, frustrating authentication loops, and unexpected lockouts? WPS Office offers a free, lightweight, and incredibly user-friendly alternative to Microsoft Office. Enjoy powerful word processing, spreadsheets, and presentations without the administrative headaches.

1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
2. Install the Software: Run the installer and follow the simple on-screen instructions to set up WPS Office on your device in minutes.
3. Open Microsoft Formats: Instantly open and edit your existing Word, Excel, and PowerPoint files natively without any formatting loss.

Completely free and lightweight Office suiteHighly compatible with Microsoft Office formats (DOCX, XLSX, PPTX)No complicated admin centers or strict MFA lockout loopsFamiliar user interface for seamless and quick migrationAvailable offline without forced cloud account logins

microsoft office alternative - wps office

Frequently Asked Questions

Why is Microsoft Authenticator asking for a QR code I can't access?

When MFA is strictly enforced on your tenant before you have configured the Authenticator app, the system demands setup upon your next login. It generates the required QR code inside the account boundary, creating an impossible loop if you are entirely logged out of all active sessions.

Can I bypass the Microsoft 365 admin MFA using a phone number?

If you previously set up alternative authentication methods (like SMS or a phone call), you can click 'Sign in another way' at the login screen. If no alternative methods were configured before the lockout, you cannot bypass the Authenticator requirement.

Will self-service password reset fix my MFA lockout?

No. Self-service password reset (SSPR) only changes your account password. It still relies on your registered authentication methods to verify your identity and cannot bypass or reset an enforced MFA QR code loop.

How do I find the right support number for my region?

Visit support.microsoft.com/help/28808 and look for the 'Global customer service phone numbers' directory. Select your region and country to find the dedicated business support line for Microsoft 365 administrators.

Login & Account Issues