MFA & Verification Issues

How to Recover Microsoft 365 Admin Access After Changing a Phone Number

Natalie Taylor Oct 10, 2026 869 views

Question details

An administrator is locked out of the Microsoft 365 admin center, Teams, and SharePoint because the multifactor authentication (MFA) is still tied to an old phone number.

Recovering Microsoft 365 Admin Access After Changing Your Phone Number

Product: Microsoft 365
Device & OS: not provided
Scenario: Attempting to sign in to Microsoft 365 admin services after getting a new mobile phone number.
Observed behavior: Password-reset texts successfully arrive at the new phone number, but the actual login prompt for admin services continues to require MFA verification from the old, unavailable phone number.

Before you start

Check with your team to determine if there is another global administrator account active in your Microsoft 365 organization, as having a second admin is the fastest way to resolve this lockout.

Solution 1Recommended

Revoke and Re-register MFA Using Another Global Admin

If your organization has multiple global admins, an alternate active admin can clear your old MFA settings through the Microsoft Entra admin center.

This is the most efficient solution and does not require contacting Microsoft support. Once the alternate administrator revokes your current MFA sessions, you will be prompted to set up a new verification method upon your next login.

Sign in to Microsoft Entra

Have the alternate global administrator sign in to the Microsoft Entra admin center using their active credentials.

Navigate to the Users Directory

On the left-hand navigation pane, select 'Users' and then click on 'All users'.

Select the Locked Account

Search for your locked administrator account in the directory list and click on it to open the profile details.

Reset Authentication Methods

Click on 'Authentication methods' in the left menu, then select 'Require re-register multifactor authentication'. This action invalidates the old phone number.

Revoke and Re-register MFA Using Another Global Admin

Access Ready for Setup: The next time you attempt to log in to Microsoft 365, the system will prompt you to configure a new MFA method where you can register your new phone number.

Solution 2

Contact Microsoft 365 Business Support

If you are the sole global administrator for your organization, you must contact Microsoft support to manually verify your identity and reset your MFA.

Free Microsoft Office alternative

Avoid Locked-Out Downtime with WPS Office

While you wait for Microsoft Support to restore your admin access, you don't have to stop working. WPS Office allows you to create, view, and edit all your essential documents locally without relying on cloud-based administrative logins.

1. Download the Installer: Visit the official WPS website and download the free WPS Office suite for your operating system.
2. Install the Software: Run the setup file and complete the quick installation process.
3. Open Your Files: Double-click any existing Word, Excel, or PowerPoint file on your computer to open it instantly in WPS Office and resume your work.

Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.A free, lightweight, and powerful alternative to Microsoft 365.Familiar user interface with zero learning curve for Office users.Work offline locally without being blocked by cloud authentication or MFA lockouts.

microsoft office alternative - wps office

Frequently Asked Questions

Why can I reset my password with my new number but still can't log in?

Microsoft 365 handles Self-Service Password Reset (SSPR) and Multifactor Authentication (MFA) as two separate security mechanisms. Updating your phone number for password resets does not automatically change the phone number designated for your MFA sign-in prompts.

Can I temporarily bypass MFA if I am the only administrator?

No. To protect organizational data, Microsoft enforces security defaults that strictly require MFA for all administrative roles. There is no bypass option; you must contact the Data Protection team to have the MFA requirement safely reset.

How long does it take for Microsoft Data Protection to unlock my account?

If you are the only global administrator, the verification process typically takes between 1 to 3 business days. The Data Protection team must thoroughly verify your identity and organizational ownership before making changes to an admin account.

How can I prevent this lockout from happening again?

It is highly recommended to maintain at least two global administrator accounts (often called a 'break-glass' account) in your tenant. Additionally, you should configure multiple authentication methods, such as the Microsoft Authenticator app and a secondary email or phone number, so you have fallback options.

Login & Account Issues