MFA & Verification Issues

How to Remove Two-Factor Authentication Without a Verification Code

Maira Mehtab Sep 28, 2026 869 views

Question details

The user needs to remove two-factor authentication but is stuck in a loop because the required verification code is being sent to the same phone number associated with the locked account.

Product: Microsoft Entra ID / Authenticator
Device & OS: not provided
Scenario: Attempting to disable or change 2FA settings without access to the current verification code or an alternative login method.
Observed behavior: The system continuously prompts for a verification code sent to the inaccessible phone number, preventing the user from bypassing or removing the two-factor authentication requirement.

Before you start

Verify if you have an alternative sign-in method configured (such as a recovery email or a backup code), or confirm whether you have Global Administrator privileges for your organization's tenant.

Solution 1Recommended

Manage Authentication Methods in Microsoft Entra ID

If you are a Global Administrator, you can manually reset or change the user's authentication methods directly from the admin center to break the verification loop.

This method requires administrative privileges. Administrators can revoke existing multi-factor authentication sessions or require the user to re-register their security info upon their next login.

Sign in to Microsoft Entra

Locate the user

Navigate to 'Identity', expand 'Users', and click on 'All users'. Search for and select the user who is locked out.

Access authentication methods

In the left-hand menu under the user's profile, click on 'Authentication methods'.

Remove or reset 2FA

Select the problematic phone number or authentication method and click 'Delete' or 'Remove'. Alternatively, click 'Require re-register MFA' to force a setup prompt on their next login.

Solution 2

Contact Microsoft Support for Account Assistance

If no alternative verification method is available and you do not have administrative access, you must contact Microsoft support to regain access to the account.

Free Microsoft Office alternative

Experience a Hassle-Free Office Suite with WPS Office

Dealing with complex account lockouts and MFA loops can disrupt your productivity. While you work on recovering your Microsoft account, consider switching to WPS Office. It is a lightweight, free alternative that offers seamless local offline work without mandatory complex multi-factor authentication hurdles.

1. Download the installer: Visit the official WPS Office website and download the free version for your operating system.
2. Install WPS Office: Run the downloaded installation file and follow the straightforward on-screen instructions.
3. Open your files: Launch the application and open your existing Word, Excel, or PowerPoint documents instantly.

Fully compatible with Microsoft Office formats like .docx, .xlsx, and .pptxFree, lightweight, and fast installation for immediate productivityFamiliar user interface for a seamless migrationWork offline locally without being blocked by cloud authentication loops

Frequently Asked Questions

Can I bypass two-factor authentication if I lost my phone?

You can only bypass it if you previously set up an alternative verification method, such as a secondary email address or a set of backup codes. Click 'Sign in another way' on the login screen to check available options.

What if I am the only Global Administrator and I am locked out?

If you are the sole administrator and get locked out of your tenant, you will need to contact the Azure Data Protection team or Microsoft Support to verify your identity and regain access. This process can take several days.

How do I prevent getting locked out by 2FA in the future?

Always configure at least two different authentication methods, such as an authenticator app and an alternate email address. Additionally, organizations should create an emergency access 'break-glass' admin account.

Login & Account Issues