'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Recover Microsoft Authenticator Access Without Number Matching on a New Phone
Question details
Users who reinstalled Microsoft Authenticator on a new phone are unable to use text-message verification as an alternative to number matching during sign-in.
- Product
- Microsoft 365 / Microsoft Authenticator
- Device & OS
- not provided
- Scenario
- Setting up or recovering Microsoft Authenticator on a new smartphone for an existing Microsoft 365 account.
- Observed behavior
- The sign-in process forces number matching and does not offer the option to verify via text message, effectively locking the user out of their account.
Before proceeding, check if your organization has another active Global Administrator who can access the Microsoft Entra ID admin center to assist you with an authentication reset.
Reset Authentication Methods via Another Global Administrator
If your organization has multiple global admins, one of them can quickly reset your MFA settings in Microsoft Entra ID.
This is the fastest method to regain access. By having another administrator clear your old device's MFA sessions, you will be prompted to register your new phone upon your next sign-in.
Have the alternative global administrator sign in to the Microsoft Entra admin center using their own admin credentials.
Navigate to 'Identity' > 'Users' > 'All users' from the left-hand menu, and search for your user account.
Click on your user profile, then select 'Authentication methods' from the left navigation pane.
Click on 'Require re-register MFA'. This invalidates the old Authenticator setup and prompts you to configure it on your new phone during your next login attempt.
Contact Microsoft Business Support for Account Recovery
Use this method if you are the only global administrator for your organization and are completely locked out.
Switch to WPS Office for a Hassle-Free Productivity Experience
Dealing with complex account lockouts and MFA resets in Microsoft 365 can halt your work. Stay productive offline and online with WPS Office, a lightweight, easy-to-use alternative that opens your existing files without complicated sign-in barriers.
- 1. Download and Install: Visit the official WPS Office website to download the free installer for your operating system.
- 2. Open Your Files: Launch WPS Office and directly open your existing Word, Excel, or PowerPoint files without needing an internet connection.
- 3. Edit and Save: Edit your documents using the familiar interface and save them in standard Office formats to maintain compatibility.
Frequently Asked Questions
Why am I forced to use number matching in Microsoft Authenticator?
Microsoft enabled number matching as a mandatory default security feature across all tenants to prevent MFA fatigue attacks, replacing the simpler 'Approve/Deny' push notifications.
Can I bypass Microsoft Authenticator if I get a new phone?
You can only bypass the Authenticator app if you previously set up an alternative verification method (like a backup email or FIDO2 security key) or if your organization's IT admin resets your MFA session.
How do I backup Microsoft Authenticator to prevent this issue in the future?
Open the Authenticator app settings on your old phone and enable 'Cloud Backup' (for iOS) or 'Cloud Sync' (for Android) using a personal Microsoft account before switching to a new device.
Why isn't text-message verification showing up as an option?
Text-message verification might not appear if your organization's IT policies have disabled SMS as a valid authentication method in Microsoft Entra ID due to security concerns.
