MFA & Verification Issues

How to Fix Microsoft Authenticator MFA Lockout for Business Accounts

Maira Mehtab Sep 21, 2026 868 views

Question details

The user is unable to access their Microsoft 365 business account because the Microsoft Authenticator app was removed, and setting it up again requires a verification code from the missing app.

Product: Microsoft 365 / Microsoft Authenticator
Device & OS: not provided
Scenario: Attempting to sign in to a Microsoft 365 work or business email account after the Authenticator app was deleted or reset.
Observed behavior: The sign-in process falls into an endless loop, requesting a multi-factor authentication (MFA) code from the Authenticator app in order to recover or re-register the Authenticator app itself.

Before you start

Before troubleshooting, determine whether you are the sole administrator for your Microsoft 365 organization, as this dictates the correct account recovery process.

Solution 1Recommended

Request an MFA Reset from Another Administrator

Use this method if your organization has multiple IT administrators who can access the backend system to reset your authentication methods.

Because multi-factor authentication acts as a strict security barrier, standard users cannot bypass it when the primary method is lost. Another administrator must revoke the old sessions and force a re-registration of the Authenticator app via the Microsoft Entra admin center.

Contact your IT Admin

Reach out to another Microsoft 365 Global Administrator or IT support personnel within your company.

Access Entra Admin Center

Ask the administrator to log in to the Microsoft Entra admin center using their own admin credentials.

Locate your user profile

The admin should navigate to 'Users' > 'All users' and select your locked account from the list.

Require MFA re-registration

Under the 'Authentication methods' section for your profile, the admin must select 'Require re-register MFA'.

Set up Authenticator again

Once the reset is applied, attempt to log into your Microsoft 365 account again. You will be prompted to set up Microsoft Authenticator from scratch.

Instant Access: Once the administrator requires re-registration, the old Authenticator loop will break, and you can securely register your new device immediately.

Solution 2

Contact Microsoft 365 Business Support

Use this method if you are the only Global Administrator for your business account and cannot reset the MFA yourself.

Free Microsoft Office alternative

Switch to WPS Office to Avoid Cloud Lockouts

Cloud-based authentication loops can paralyze your business workflows. WPS Office offers a powerful, local-first alternative that allows you to manage, edit, and save your documents offline without being locked out by mandatory multi-factor authentication issues.

1. Download the software: Visit the official WPS Office website and download the free installer for your operating system.
2. Install locally: Run the installer to set up WPS Office on your computer for immediate offline access.
3. Open existing files: Double-click any of your existing Microsoft Office files to open and edit them in WPS Office seamlessly.

Access and edit your documents completely offline without mandatory cloud MFA lockouts.Highly compatible with Microsoft Office formats, including Word (.docx), Excel (.xlsx), and PowerPoint (.pptx).Free, lightweight, and installs in minutes without requiring complex IT administration.Familiar tabbed interface that requires zero learning curve for former Microsoft Office users.

microsoft office alternative - wps office

Frequently Asked Questions

Can Microsoft community support fix my MFA lockout?

No. Community support agents do not have backend access to user accounts or authorization to forward cases to the data-protection team. You must contact another admin in your organization or call Microsoft 365 Business Support directly.

Why is Microsoft Authenticator asking for a code from the app I just deleted?

This happens when the Authenticator app is set as your default or only MFA method. When you reinstall the app, the Microsoft system still expects you to verify the new login using the previous session tokens, causing an endless loop.

What if this MFA lockout happens to my personal Microsoft account?

If you are locked out of a personal account (like Outlook.com, Hotmail, or Live.com) due to a missing Authenticator app, you cannot use business support. You must go through the standard consumer account-recovery process via the Microsoft account recovery page.

How can I prevent an Authenticator loop in the future?

Always configure at least two different authentication methods in your security settings, such as tying the account to an alternate email address or adding a phone number for SMS verification, before switching devices or deleting the app.

Login & Account Issues