How to Fix Microsoft 365 Two-Factor Authentication Setup Loop
Question details
Users are unable to sign in to their work or school accounts due to being stuck in a continuous loop requiring Microsoft Authenticator, which has not been properly registered.

- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to sign in to a Microsoft 365 work or school account and being prompted for an unregistered two-factor authentication method.
- Observed behavior
- The sign-in process enters a continuous loop, repeatedly asking for an authentication code from the Microsoft Authenticator app that the user cannot provide, preventing account access.
Confirm whether your account is a personal Microsoft account or an organization-managed account (Work or School), and have your subscription or organization details ready.
Contact Your IT Administrator to Reset Authentication Methods
This is the primary and most effective solution. Only an administrator with access to Microsoft Entra ID can reset your MFA requirements.
Because this involves security policies enforced by your organization, end-users cannot bypass the loop on their own. The organization's IT or Microsoft 365 administrator must reset the authentication session.
Find the contact details for your company or school's IT helpdesk or system administrator.
Ask the administrator to revoke your current multi-factor authentication sessions and select 'Require re-register MFA' for your account in Microsoft Entra ID.
If immediate access is needed, ask the admin to provide a Temporary Access Pass (TAP) or an alternative sign-in method.
Once the admin resets your account, log in again. You will be prompted to set up Microsoft Authenticator from scratch. Follow the on-screen prompts to register your device properly.

Contact Microsoft Business Support
Use this solution if you are the sole administrator of the tenant and are locked out, or if your organization does not have an active administrator.
Stay Productive with WPS Office While Locked Out
If you are stuck in a Microsoft 365 authentication loop and cannot access your online documents, WPS Office provides a powerful, free alternative. Edit your files locally without worrying about complex cloud logins or multi-factor authentication lockouts.
- 1. Download the software: Visit the official WPS website and download the free installation package for your operating system.
- 2. Install WPS Office: Run the installer and follow the quick setup wizard to install the suite on your computer.
- 3. Open your Microsoft files: Right-click any existing Word, Excel, or PowerPoint document on your local drive and select 'Open with WPS Office' to continue working immediately.

Frequently Asked Questions
Why am I stuck in the Microsoft Authenticator setup loop?
This happens when your organization's security policy requires Microsoft Authenticator, but the app was never successfully registered to your device, or the registration was deleted from your phone. The system constantly asks for a code you cannot generate.
Can I bypass the Microsoft 365 two-factor authentication loop myself?
Generally, no. If this is a work or school account, organizational security policies override personal settings. You must contact your IT administrator to reset your authentication methods in Microsoft Entra ID.
How long does an MFA reset take to apply?
Once your IT administrator selects 'Require re-register MFA' in Microsoft Entra ID, the change takes effect almost immediately. Upon your next sign-in attempt, you will be prompted to set up your authentication method as if it were your first time.
What if I am the only administrator and I am locked out?
If you are the sole global admin and cannot bypass the loop, you must contact the Microsoft Data Protection team via phone support. Be prepared to verify your identity and organizational ownership.




