MFA & Verification Issues

How to Fix Microsoft 365 Admin Portal Two-Step Verification Loop

Adam DavisAdam Davis Oct 29, 2026 868 views

Question details

The user is unable to access the Microsoft 365 Admin Portal due to a two-step verification sign-in loop.

Fix Microsoft 365 Admin Portal Two-Step Verification Issues
Product
Microsoft 365 Admin Portal
Device & OS
not provided
Scenario
Attempting to sign in to the Microsoft 365 Admin Center as an administrator.
Observed behavior
The login screen prompts for verification via Microsoft Authenticator, but the account is not configured in the app, preventing sign-in and creating a loop.
Before you start

Ensure you have access to any alternative phone numbers or email addresses associated with your admin account. If you are not the sole administrator, reach out to another global admin in your organization before proceeding with complex account recovery.

Solution 1Recommended

Use an Alternative Verification Method

If you previously set up an alternative verification method, you can bypass the Microsoft Authenticator prompt to regain access.

1
Enter admin credentials

Go to the Microsoft 365 Admin Center login page and enter your administrator email address and password.

2
Select alternative sign-in

When prompted for the authenticator code, click on the link that says 'Sign in another way' or 'I can't use my Microsoft Authenticator app right now'.

3
Choose a backup method

Select an alternative method from the list, such as receiving a text message (SMS), a phone call, or using an alternate email address.

4
Verify and log in

Enter the verification code you receive via your chosen alternative method to successfully access the admin portal.

Use an Alternative Verification Method
Free Microsoft Office alternative

Try WPS Office for a Hassle-Free Office Experience

Dealing with Microsoft 365 admin lockouts can halt your productivity. While you wait for your account recovery, consider using WPS Office—a free, lightweight, and highly compatible alternative to Microsoft Office. It allows you to create, edit, and save your documents without relying on complex admin portals or mandatory cloud authentications.

  1. 1. Download the installer: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install WPS Office: Run the downloaded file and follow the straightforward on-screen instructions to set up the software.
  3. 3. Open your files: Launch WPS Office and directly open your existing Word, Excel, or PowerPoint files to resume your work instantly.
Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.No mandatory cloud logins or complex multi-factor authentications required for local offline editing.Free, lightweight, and runs smoothly on Windows, Mac, Linux, and mobile devices.Familiar user interface ensures a seamless transition with zero learning curve.
microsoft office alternative - wps office

Frequently Asked Questions

Why was two-step verification enabled on my Microsoft 365 admin account automatically?

Microsoft often enables 'Security defaults' automatically for tenants to protect organizations from identity-related attacks. This baseline security policy requires all administrators and users to register for multi-factor authentication (MFA).

Can another administrator reset my MFA settings to fix the sign-in loop?

Yes. If your organization has another Global Administrator with access to the portal, they can log into the Microsoft 365 Admin Center, navigate to Active Users, select your account, and choose 'Require re-register MFA' to reset your settings.

How do I correctly set up Microsoft Authenticator once I regain access?

After regaining access, go to your Microsoft account's Security Info page. Select 'Add sign-in method', choose 'Authenticator app', and follow the prompts to scan the generated QR code using the Microsoft Authenticator app on your smartphone.

Will I lose my organization's data during the Microsoft Data Protection recovery process?

No. The Data Protection team only resets your account's authentication methods so you can regain access. Your organization's data, emails, user accounts, and files remain entirely intact.