logo
search
MFA & Verification Issues

How to Get a Temporary Access Pass for Microsoft Authenticator

Emma BrownEmma Brown Sep 27, 2026 869 views

Question details

The user needs a Temporary Access Pass to register Microsoft Authenticator on a replacement device after losing their previous phone.

How to Get a Temporary Access Pass to Set Up Microsoft Authenticator
Product
Microsoft Authenticator
Device & OS
not provided
Scenario
Setting up multi-factor authentication on a new mobile device without having access to the old device.
Observed behavior
The user is blocked from signing in and requires a Temporary Access Pass issued by their organization to bypass the missing authenticator and set up a new one.
Before you start

Ensure you have an alternative way to communicate with your organization's IT help desk, as you will need to verify your identity with them before they can issue a secure pass.

Solution 1Recommended

Request a Temporary Access Pass from Your Administrator

Since a Temporary Access Pass is an enterprise security feature, end-users cannot generate it themselves. It must be issued by a Microsoft Entra ID administrator.

A Temporary Access Pass (TAP) is a time-limited passcode issued by your organization's IT department.

It allows you to sign in securely without a password and helps you register passwordless authentication methods, such as the Microsoft Authenticator app, on a new device.

1
Contact the IT Help Desk

Reach out to your organization's IT support or system administrator via email, phone, or your internal ticketing system.

2
Request an Authenticator Reset

Explain that your previous phone was lost and request a Temporary Access Pass to re-register Microsoft Authenticator on your replacement device.

3
Log In with the Pass

Once the administrator securely provides the Temporary Access Pass, navigate to the Microsoft sign-in portal. Enter your username and use the pass to log in.

4
Register Your New Device

Follow the on-screen prompts to set up your security info. Open the Microsoft Authenticator app on your new phone, select 'Add work or school account', and complete the setup process.

Security Warning: Never share your Temporary Access Pass publicly or with unauthorized individuals. It grants direct access to your organizational account.
Free Microsoft Office alternative

Experience a Seamless and Free Office Suite with WPS Office

While you are coordinating with your IT department to recover your Microsoft account access, you can still stay productive. WPS Office is a highly compatible, free alternative to Microsoft Office that lets you view, edit, and create documents locally without requiring complex enterprise authentication.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install WPS Office: Run the setup file and follow the quick on-screen instructions to install the suite on your device.
  3. 3. Start Creating Instantly: Open WPS Office and start editing your documents immediately without waiting for account recovery.
No enterprise account or multi-factor authentication required for local editing.Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.Free, lightweight, and fast-loading office suite for all your devices.Familiar user interface makes transitioning completely seamless.Built-in PDF reader, editor, and conversion tools.
microsoft office alternative - wps office

Frequently Asked Questions

Can I generate a Temporary Access Pass myself?

No. A Temporary Access Pass is an enterprise security control. It can only be generated and issued by an administrator within your organization's Microsoft Entra ID tenant.

How long is a Temporary Access Pass valid?

The validity period is configured by your IT administrator. It can be set anywhere from 10 minutes to 30 days, but it is typically configured for a short window just long enough to allow you to set up your new authenticator app.

Can I use my Temporary Access Pass more than once?

It depends on how your IT administrator created it. Passes can be configured for either single-use or multiple uses. A single-use pass is most common and will expire immediately after you log in.

What should I do if I find my lost phone later?

If you recover your lost device, you should immediately inform your IT administrator so they can revoke any old security tokens or remove the old device's registration from your account to prevent unauthorized access.