'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Recover a Microsoft Entra Administrator Account Without MFA
Question details
The user needs to regain access to a Microsoft Entra Global Administrator account after losing the phone or authenticator app required for multi-factor authentication.
- Product
- Microsoft Entra
- Device & OS
- not provided
- Scenario
- A Global Administrator has lost their MFA device and cannot pass the secondary authentication prompt during login to access the admin center.
- Observed behavior
- The user can successfully enter their password but is blocked at the MFA verification step, preventing them from creating an online support ticket or managing the tenant.
Gather your tenant ID, subscription details, and billing information, as Microsoft Support will require these to verify your identity.
Contact Microsoft Support for Identity Verification
Use this method if you are the sole Global Administrator on the tenant and have completely lost access to your MFA device.
Because you are the only administrator, no one else in your organization can reset your MFA settings. You must bypass standard online ticketing and contact Microsoft directly by phone.
Community moderators and forum agents do not have the authorization to bypass MFA or change administrator access.
Visit the official Microsoft Customer Service phone numbers page to find the specific contact number for your country or region.
Call the support number and clearly state that you are the sole Global Administrator, you can enter your password, but you lost access to your Authenticator device and cannot complete MFA.
Explicitly mention that you are unable to create an online support request and ask the representative to escalate your case to the Account Recovery or Data Protection team.
Provide your tenant ID, active subscription details, and billing information to the Data Protection team so they can verify your identity and help reset your MFA.
Ask Another Administrator to Reset MFA Methods
Use this method if your organization has more than one Global Administrator or Privileged Authentication Administrator.
Document Your IT Procedures with WPS Office
While you work on recovering your Microsoft Entra administrator access, consider using WPS Office as a free, lightweight alternative to Microsoft Office. It is highly recommended for creating, managing, and securing your IT documentation, disaster recovery plans, and emergency break-glass account details.
- 1. Download and install WPS Office: Visit the official WPS Office website to download the free suite for your operating system.
- 2. Create a disaster recovery document: Open WPS Writer to draft your organization's emergency access procedures and tenant ID information.
- 3. Save and encrypt your files: Save your document in the standard .docx format and use the built-in encryption feature to password-protect sensitive IT documents.
Frequently Asked Questions
Can Microsoft forum moderators help me bypass MFA?
No. Microsoft Q&A moderators, community members, and standard support agents do not have the authorization or system access to bypass MFA or change administrator access. You must contact the Data Protection team via phone.
What information do I need when calling Microsoft Support for MFA reset?
You should have your tenant ID (or primary tenant domain), active subscription details, billing information, and any relevant organizational identity documents ready to prove ownership of the tenant.
How can I prevent getting locked out of my Entra tenant in the future?
Microsoft highly recommends creating at least two 'break-glass' (emergency access) accounts in your tenant. These accounts should be excluded from Conditional Access MFA policies and have their credentials stored securely in a physical safe or enterprise password manager.
