logo
search
MFA & Verification Issues

How to Remove or Reset MFA for a Microsoft 365 Administrator Account

Ayan MasoodAyan Masood Oct 15, 2026 870 views

Question details

A Microsoft 365 administrator is unable to sign in due to a lost phone containing the Microsoft Authenticator app and needs to reset or disable the MFA requirement.

How to Remove or Reset MFA for a Microsoft 365 Administrator Account
Product
Microsoft 365
Device & OS
not provided
Scenario
The user has lost their mobile device with the authentication app and is currently locked out of the Microsoft 365 admin portal.
Observed behavior
The system prompts for multi-factor authentication, which the administrator cannot complete, preventing access to the Microsoft 365 tenant.
Before you start

Determine if your organization has another active Global Administrator, as their assistance is the fastest and most reliable way to regain access to your account.

Solution 1Recommended

Request MFA Reset from Another Global Administrator

If there is another global admin in your tenant, they can easily require you to re-register your MFA methods.

Microsoft 365 allows any Global Administrator to manage the authentication methods of other users and administrators within the same tenant.

Having another admin reset your MFA configuration is the quickest resolution and avoids the need for external support.

1
Sign in to the Admin Center

Ask the other Global Administrator to sign in to the Microsoft Entra admin center (formerly Azure AD) or the Microsoft 365 admin center.

2
Locate your user account

Navigate to 'Users' > 'All users' and select your locked-out administrator account from the list.

3
Access Authentication Methods

In the user profile menu on the left pane, click on 'Authentication methods'.

4
Require Re-registration

Click 'Require re-register MFA'. This clears your current device session and prompts you to set up a new Authenticator app upon your next login.

Request MFA Reset from Another Global Administrator
Free Microsoft Office alternative

Stay Productive with WPS Office While Regaining Admin Access

Getting locked out of your Microsoft 365 admin account can disrupt your workflow. While waiting for your access to be restored, use WPS Office as a free, lightweight alternative to seamlessly edit your documents, spreadsheets, and presentations without relying on cloud admin access.

  1. 1. Download the software: Visit the official WPS Office website and download the free installation package for Windows, Mac, or Linux.
  2. 2. Install WPS Office: Run the installer and follow the quick setup wizard to install the suite on your computer.
  3. 3. Open your files: Launch WPS Office and directly open your existing Microsoft Word, Excel, or PowerPoint files to continue working immediately.
Highly compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.Fully functional desktop apps that don't require complex cloud tenant management or internet connectivity.Free, lightweight, and features a familiar user interface for a seamless, zero-learning-curve transition.
microsoft office alternative - wps office

Frequently Asked Questions

Can standard users reset their own MFA if they lose their phone?

No, standard users cannot bypass or reset their own MFA if their primary authentication device is lost. They must contact their organization's IT administrator to clear the old session and trigger a requirement to re-register their authentication methods.

How long does it take for Microsoft Support to unlock an admin account?

If you are the sole global administrator, your case is handled by Microsoft's Data Protection team. Due to strict security and ownership verification protocols, the process can take anywhere from a few days to over a week.

How can I prevent getting completely locked out of my Microsoft 365 tenant in the future?

Microsoft strongly recommends configuring at least two Global Administrator accounts or creating a dedicated 'break-glass' emergency access account that relies on alternative highly-secure authentication methods instead of a single mobile device.