'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Recover Microsoft 365 Account If Administrator Lost Authenticator
Question details
The user needs to regain access to a Microsoft 365 tenant where the sole global administrator has lost access to the Microsoft Authenticator app.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Attempting to log into the Microsoft 365 admin portal without the required Microsoft Authenticator device.
- Observed behavior
- The only administrator is locked out of the tenant and unable to approve the MFA prompt or reset the authentication methods.
Gather your Microsoft 365 tenant information, billing details, and any proof of ownership before contacting support, as you will need to verify your identity to regain access.
Contact Microsoft Data Protection Team
Directly contact Microsoft Support to verify your identity and reset the MFA settings for your administrator account.
Because you are the sole global administrator, standard self-service password reset tools will not bypass the Authenticator requirement. You must escalate the issue to Microsoft's Data Protection Team to regain entry to your tenant.
Locate the official Microsoft business support phone number for your specific country or region on the Microsoft website.
Call the support line and use the automated voice system to specify that you are calling about "Microsoft 365 business support" and have a "locked out administrator."
Provide the support agent with your tenant domain name and supply the required billing, invoice, or registration details to verify your ownership of the tenant.
Allow the Data Protection Team time to process your request. Once verified, they will reset the MFA requirement so you can log in and register a new Authenticator device.
Contact Your Cloud Service Provider or Partner
If you purchased Microsoft 365 through a third-party reseller, they may have delegated admin privileges to reset your MFA.
Try WPS Office for a Hassle-Free Offline Experience
Dealing with cloud account lockouts can disrupt your entire workflow. WPS Office provides a lightweight, free alternative to Microsoft Office that allows you to work seamlessly on local files without strictly relying on cloud authentication and complex MFA setups.
- 1. Download the software: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install WPS Office: Run the installation file and follow the straightforward on-screen prompts to set up the software.
- 3. Start working immediately: Open WPS Office and instantly start creating or editing Word, Excel, or PowerPoint files without complex account recoveries.
Frequently Asked Questions
Can a Microsoft forum moderator reset my Authenticator?
No. Forum moderators and community volunteers do not have access to backend systems and cannot reset multifactor authentication or restore administrator access for security reasons.
How long does it take for Microsoft to recover an admin account?
Recovery times vary depending on the verification process. The Data Protection team typically takes a few days to thoroughly verify tenant ownership before resetting MFA settings.
How can I prevent being locked out as an administrator in the future?
It is highly recommended to set up at least two global administrator accounts (including one "break-glass" account without device-dependent MFA) and to register multiple authentication methods, such as a secondary phone number.
