MFA & Verification Issues

How to Recover Microsoft 365 Admin Account After Losing Authenticator

Maira Mehtab Sep 20, 2026 869 views

Question details

The user is unable to log into the Microsoft 365 admin portal because they lost the phone containing their Microsoft Authenticator app, and all available sign-in methods require it.

Product: Microsoft 365
Device & OS: not provided
Scenario: Attempting to sign in to admin.microsoft.com without access to the Authenticator app.
Observed behavior: The user is blocked from accessing the admin portal because the system mandates Authenticator verification, leaving no alternative sign-in options to manage users.

Before you start

Before proceeding, check if there is another global administrator in your organization who can reset your MFA settings, or prepare your organization's tenant domain and billing information for identity verification.

Solution 1Recommended

Ask Another Global Administrator to Reset Your MFA

If your organization has multiple global admins, having them reset your authentication methods is the fastest way to regain access.

Microsoft allows any user with Global Administrator privileges to reset multi-factor authentication (MFA) settings for other users, including fellow administrators.

Contact another admin

Reach out to another user who holds Global Administrator privileges in your Microsoft 365 tenant.

Access Entra ID

Ask them to log into the Microsoft Entra admin center (formerly Azure Active Directory) at entra.microsoft.com.

Locate your account

Have them navigate to Identity > Users > All users, and select your locked-out admin account.

Require re-registration

They should select 'Authentication methods' from the left menu and click 'Require re-register MFA' to clear your old device settings.

Set up new Authenticator

Log into your account normally; you will now be prompted to set up Microsoft Authenticator on your new phone.

Fastest Recovery Route: This method immediately restores your access without needing to involve Microsoft support.

Solution 2

Contact Microsoft Data Protection Support

Use this method if you are the only administrator on the account and cannot access your tenant to reset your own MFA.

Free Microsoft Office alternative

Experience a Seamless and Secure Office Alternative with WPS Office

While you are waiting to recover your Microsoft 365 admin access, you can continue working on your important documents locally. WPS Office is a lightweight, free alternative that offers robust compatibility with Microsoft formats, ensuring your productivity never stops even when facing cloud account lockouts.

1. Download WPS Office: Visit the official WPS website to download and install the free WPS Office suite.
2. Open existing files: Launch WPS Office and open your existing Microsoft Office files directly.
3. Edit and save locally: Continue editing and saving your work in standard formats like .docx or .xlsx without needing to sign in to Microsoft 365.

Highly compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Free and lightweight, requiring no complex admin MFA setups for basic local document editing.Familiar user interface allows for an instant transition with zero learning curve.Built-in PDF editing tools for seamless document management.

microsoft office alternative - wps office

Frequently Asked Questions

Can I bypass Microsoft Authenticator if I am the only admin?

No, Microsoft enforces strict security protocols for administrators. If you are the sole admin and lose your MFA device, you cannot bypass it yourself. You must contact Microsoft Data Protection to verify your identity and perform a manual reset.

How can I prevent getting locked out of my admin account in the future?

It is highly recommended to set up a 'break-glass' or emergency access global admin account that is excluded from certain conditional access policies. Additionally, you should register multiple authentication methods (like a secondary phone number or hardware token) for your main admin account.

Is it possible to recover the Microsoft Authenticator app on a new phone without admin help?

Only if you had previously enabled cloud backup for Microsoft Authenticator on your old phone and are logging into the new phone with the same personal recovery account (like an iCloud or Microsoft personal account). If not, you must re-register the device, which requires admin intervention.

Login & Account Issues