logo
search
MFA & Verification Issues

How to Reset Microsoft Account MFA When Locked Out

Maira MehtabMaira Mehtab Sep 22, 2026 869 views

Question details

The user needs to sign in to their Microsoft account but is unable to because their configured multi-factor authentication (MFA) method is unavailable.

Product
Microsoft Account
Device & OS
not provided
Scenario
The user is attempting to sign in to their account but cannot complete the multi-factor authentication prompt due to a lost device or unavailable authenticator app.
Observed behavior
The sign-in process is blocked at the MFA verification step, preventing the user from accessing their account and Microsoft services.
Before you start

Check if you have an alternative authentication method set up on your account, such as a secondary phone number, a backup email address, or a previously saved 25-character recovery code.

Solution 1Recommended

Reset MFA for a Work or School Account

Steps for users trying to access an organization-managed Microsoft account when locked out.

1
Contact your IT Administrator

Reach out to your organization's IT helpdesk or system administrator. They manage your Microsoft 365 environment and have the authority to modify your authentication settings.

2
Request an MFA Reset

Ask the administrator to 'Require re-register MFA' for your specific user account through the Microsoft Entra admin center.

3
Set up new MFA methods

Once the administrator clears your previous settings, sign in to your Microsoft account using your email and password. You will be prompted to set up your Multi-Factor Authentication from scratch using your new phone or authenticator app.

Organization Policies: Your organization may have strict security policies regarding identity verification. Be prepared to verify your identity with your IT department before they perform the reset.
Free Microsoft Office alternative

Try WPS Office for Hassle-Free Document Editing

Getting locked out of your Microsoft account can be frustrating, especially when you need urgent access to your documents. Switch to WPS Office, a free, lightweight, and highly compatible alternative that lets you work offline locally without being blocked by cloud authentication loops.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install WPS Office: Run the downloaded file and follow the simple on-screen instructions to install the suite on your device.
  3. 3. Open Your Files Offline: Launch WPS Office and directly open your existing Microsoft Office documents to continue working without needing an internet connection or account login.
Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.Work offline locally without mandatory account sign-ins or complex MFA hurdles.Lightweight installation with a familiar, easy-to-use tabbed interface.Free access to essential word processing, spreadsheet, and presentation tools in one app.
microsoft office alternative - wps office

Frequently Asked Questions

Can I bypass Microsoft MFA if I lose my phone?

You can only bypass the primary MFA prompt if you previously set up an alternative verification method, such as a backup email address, a secondary phone number, or a printed recovery code.

What is an authenticator app recovery code?

It is a unique 25-character alphanumeric code provided by Microsoft when you first enable two-step verification. It is designed to be printed and stored safely so you can regain access if you lose your primary MFA method.

How long does the personal Microsoft account recovery process take?

If you lack access to all your security methods and need to replace them through the automated recovery process, Microsoft enforces a strict 30-day waiting period to ensure a hacker isn't trying to hijack your account.

Why does Microsoft force me to use an authenticator?

Microsoft enforces Multi-Factor Authentication (MFA) to add an essential extra layer of security. It significantly reduces the risk of your account being compromised by password-guessing, data breaches, or phishing attacks.