'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Recover a Microsoft 365 Admin Account Without MFA Phone
Question details
The user is the sole Microsoft 365 administrator and has lost the phone used for multi-factor authentication (MFA), resulting in being locked out of the tenant.
- Product
- Microsoft 365 Business
- Device & OS
- not provided
- Scenario
- A sole global administrator needs to recover tenant access after losing their primary MFA device.
- Observed behavior
- The user is unable to sign in to the Microsoft 365 admin center due to missing the required MFA prompt or code.
Before calling support, check if you have previously set up any alternate verification methods, such as a secondary email, an alternate phone number, or an authenticator app on a different device.
Contact Microsoft 365 Business Support by Phone
The most direct way for a sole global admin to regain access without alternate MFA methods is to contact Microsoft's data protection team.
Because you are the sole global administrator, no other user in your organization has the privileges required to reset your MFA status. You must verify your identity directly with Microsoft support.
Locate the official Microsoft customer service phone number for your country or region via the Microsoft support website.
Call the support line and explicitly state that you are a sole global admin who is locked out of the tenant due to a lost MFA device.
Prepare to verify your identity by providing domain ownership details, DNS records, tenant information, and billing details when requested by the data protection team.
Wait for the support team to complete their security checks and manually reset the MFA requirement for your administrator account so you can log back in.
Sign In Using an Alternate Verification Method
If you previously configured a backup authentication method, you can use it to bypass the lost phone.
Switch to WPS Office for a Hassle-Free Experience
While you are waiting to recover your Microsoft 365 tenant, you can continue your daily work without interruption using WPS Office. It is a lightweight, free alternative that offers powerful tools for word processing, spreadsheets, and presentations without complex administration or lockout risks.
- 1. Download the Installer: Visit the official WPS Office website and download the free version for your operating system.
- 2. Install the Software: Run the setup file and follow the on-screen instructions to complete the installation.
- 3. Open Your Files: Launch WPS Office and directly open your existing Microsoft Office files to resume working immediately.
Frequently Asked Questions
How long does it take for Microsoft Support to reset my MFA?
It can take anywhere from a few hours to several days. Microsoft's data protection team must rigorously verify your identity and domain ownership to ensure the security of your tenant before removing MFA requirements.
How can I prevent being locked out of my Microsoft 365 admin account in the future?
It is highly recommended to create a dedicated 'break-glass' or emergency access global admin account that is excluded from specific conditional access MFA policies, or ensure multiple admins with different MFA devices exist in the tenant.
Can another admin reset my MFA if I lose my phone?
Yes. If your organization has more than one global administrator, another admin can log into the Microsoft Entra admin center or Microsoft 365 Admin Center and reset your authentication methods, bypassing the need to call Microsoft Support.
