MFA & Verification Issues

How to Reset or Disable Microsoft 365 Business Admin Account MFA

Maira Mehtab Sep 20, 2026 869 views

Question details

The user needs to reset or disable Multi-Factor Authentication (MFA) for a Microsoft 365 business administrator account because they are locked out.

Product: Microsoft 365
Device & OS: not provided
Scenario: An administrator has the correct account password and email access but is blocked from logging in because they lack the authenticator app or verification code, and no other admin accounts exist.
Observed behavior: The login process halts at the MFA prompt requesting an authenticator code, which the user cannot provide, resulting in a complete account lockout.

Before you start

Gather your Microsoft 365 subscription ID, company information, billing details, registered phone number, and alternate email address to securely verify your identity with support.

Solution 1Recommended

Contact Microsoft 365 Support for Admin MFA Reset

Since you are the sole administrator, self-service MFA resets are restricted. You must contact Microsoft Data Protection Support to regain access.

Administrator accounts contain highly sensitive data, so Microsoft restricts self-service recovery when two-factor authentication is lost.

Because no other active admin is available in your tenant to bypass or reset your MFA, Microsoft's Data Protection team must intervene and manually verify your business identity.

Prepare your verification details

Collect your subscription data, billing information, and company profile details associated with the account.

Call business support

Dial the official Microsoft 365 Business support phone number designated for your specific country or region.

Request the Data Protection team

Explain to the support representative that you are the sole administrator locked out by an MFA prompt and require the Data Protection team to reset your authentication.

Verification Timeline: This process may take several days, as Microsoft must securely verify your identity and organizational ownership before disabling or resetting the MFA on an administrator account.

Solution 2

Reconfigure the Microsoft Authenticator App

After Microsoft Support successfully resets your MFA, you must set up your security methods again during your next login.

Free Microsoft Office alternative

Experience a Hassle-Free Productivity Suite with WPS Office

If you are tired of complex enterprise account lockouts, consider switching to WPS Office. It provides a lightweight, highly compatible, and free alternative to Microsoft Office for your daily document creation needs.

1. Download the installer: Visit the official WPS Office website and download the free version for your operating system.
2. Install the software: Run the downloaded installer and follow the simple on-screen instructions to set up WPS Office on your computer.
3. Open and edit files: Launch WPS Office and immediately start creating or editing your existing Microsoft Office files with seamless format compatibility.

Free to use with a lightweight, fast installationFully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx)Familiar, user-friendly interface requiring no steep learning curveLocal document editing without mandatory enterprise MFA lockouts

microsoft office alternative - wps office

Frequently Asked Questions

Why can't I reset my Microsoft 365 admin MFA via email?

For security reasons, Microsoft requires administrator accounts to use strong authentication. Email verification alone is not considered secure enough to reset an admin's Multi-Factor Authentication, protecting your tenant from hostile takeovers.

What should I do if I am not the only administrator on the Microsoft 365 account?

If your organization has another active administrator, you can ask them to log in to the Microsoft Entra admin center, navigate to your user profile under 'Users', select 'Authentication methods', and click 'Require re-register MFA'.

How do I prevent being locked out as a sole administrator in the future?

It is strongly recommended to set up a 'break-glass' secondary global administrator account with a long, secure password and alternative verification methods (or an exception to MFA policies if permitted) to ensure you always have a backdoor for recovery.

Login & Account Issues