How to Get a New Microsoft Authenticator QR Code Without Admin Sign-In
Question details
An administrator is locked out of Microsoft 365 and OneDrive because the Microsoft Authenticator app requires a new QR code, but sign-in is blocked since Authenticator is the only configured MFA method.

- Product
- Microsoft 365 / Microsoft Authenticator
- Device & OS
- not provided
- Scenario
- Attempting to sign in to an administrator account when the Authenticator app is the only verification method but requires reconfiguration.
- Observed behavior
- The user is trapped in a loop where signing in requires Authenticator approval, but setting up the Authenticator requires signing in to get a new QR code.
Determine if your organization has another global administrator account that can access the Microsoft 365 or Entra admin center, as this is the fastest way to resolve the lockout.
Ask Another Administrator to Require MFA Re-registration
If your organization has multiple administrators, another admin can reset your multi-factor authentication status from the Microsoft Entra admin center, allowing you to generate a new QR code.
This method requires a secondary global administrator or authentication administrator who still has access to the admin dashboard.
Have the active administrator sign in to the Microsoft Entra admin center using their credentials.
Navigate to 'Users' > 'All users' in the left sidebar and click on your locked administrator account.
Select 'Authentication methods' from the user profile menu, then click 'Require re-register MFA'. Upon your next login attempt, you will be prompted to scan a new QR code.

Contact Microsoft Data Protection via Phone
If you are the only administrator and cannot access the admin center, you must contact Microsoft Business Support to manually reset your MFA.
Try WPS Office for a Hassle-Free Experience
While you work on recovering your Microsoft 365 admin access, keep your productivity going locally with WPS Office. It provides a lightweight, highly compatible, and free alternative to Microsoft Office without frustrating cloud lockouts.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your PC or Mac.
- 2. Install the Software: Run the installer and follow the simple on-screen instructions to set up the office suite in seconds.
- 3. Open Your Files Directly: Launch WPS Office and open your existing Microsoft Office documents directly to continue working seamlessly.

Frequently Asked Questions
Why is Microsoft Authenticator asking for a new QR code?
This typically occurs if the Authenticator app was deleted and reinstalled, if you moved to a new phone without using the cloud backup feature, or if the app's local data was cleared.
Can I bypass the automated phone system if it rejects my phone number?
Yes. When calling Microsoft Business Support, avoid entering your phone number if it's not recognized. Instead, stay on the line and clearly state 'Data Protection' or 'Administrator Lockout' to force the system to route you to a human agent.
How can I prevent an administrator MFA lockout in the future?
Always configure at least two different authentication methods for admin accounts, such as a secondary email, SMS, or hardware security key. Additionally, it is highly recommended to create an emergency 'break-glass' global admin account that uses a different highly secure authentication method.




