MFA & Verification Issues

How to Reset Microsoft Entra MFA Without Authenticator Access

Maira Mehtab Sep 22, 2026 869 views

Question details

The user has lost access to the Microsoft Authenticator app due to a stolen phone and needs to regain access to their tenant administration account without alternative verification methods.

Product: Microsoft Entra ID
Device & OS: not provided
Scenario: Attempting to log into a Microsoft administrator account but failing because the Authenticator app is unavailable.
Observed behavior: The user is completely locked out of the tenant administrator account because they cannot fulfill the Multi-Factor Authentication (MFA) prompts.

Before you start

Before proceeding, check if you have an alternate global administrator account in your tenant or if any secondary authentication methods (like SMS or a backup email) were previously configured.

Solution 1Recommended

Request an MFA Reset from Another Administrator

If your organization has more than one global administrator, a secondary admin can reset your MFA settings quickly.

This is the fastest method to regain access. It relies on another administrator having active access to the Microsoft Entra admin center to enforce a re-registration of your authentication methods.

Contact your secondary admin

Reach out to another global administrator within your organization and explain that you are locked out.

Navigate to the Users directory

Ask the administrator to sign in to the Microsoft Entra admin center, go to 'Identity', and click on 'Users' followed by 'All users'.

Locate the locked account

Have them search for your account in the user list and click on your profile.

Require MFA re-registration

The administrator must select 'Authentication methods' from the left menu and click 'Require re-register MFA'.

Set up Authenticator again

Log in to your account with your password. You will be prompted to set up your Microsoft Authenticator app on your new device.

Admin Access Required: This method only works if you are not the sole administrator for your tenant. If you are the only admin, proceed to the next solution.

Solution 2

Contact Microsoft Data Protection Support

If you are the only tenant administrator, you must contact Microsoft support to manually verify your identity and reset your MFA.

Free Microsoft Office alternative

Keep Working Offline with WPS Office

While you wait for Microsoft Support to reset your Entra MFA, you don't have to pause your business tasks. WPS Office is a lightweight, free alternative that offers excellent compatibility with all Microsoft Office formats, allowing you to edit your documents offline without needing admin center access.

1. Download the software: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the installer and follow the quick on-screen instructions to set up the suite on your computer.
3. Open existing files: Launch WPS Office and directly open your existing Microsoft Office documents to continue your work without interruptions.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).No complex tenant administration or mandatory MFA lockouts for standard offline editing.Lightweight installation and familiar user interface for immediate productivity.Free integrated PDF editor and document creation tools.

microsoft office alternative - wps office

Frequently Asked Questions

Can I bypass Microsoft Authenticator if my phone is stolen?

No, unless you have previously configured alternative verification methods like SMS, phone calls, or a backup email, you cannot bypass MFA. You must have your MFA reset by another admin or Microsoft Support.

How long does it take for Microsoft Support to reset MFA for a sole admin?

The identity verification process with Microsoft's Data Protection team can take anywhere from a few days to a couple of weeks, depending on how quickly you can provide the required proof of tenant ownership.

How can I prevent a sole administrator lockout in the future?

It is highly recommended to create an emergency access 'break-glass' account. This account should be highly secure, excluded from standard MFA Conditional Access policies, and only used when all other admin accounts are locked out.

Login & Account Issues