MFA & Verification Issues

How to Sign In to Microsoft Work Account After Losing Authenticator Phone

Maira Mehtab Sep 20, 2026 869 views

Question details

The user is unable to access their Microsoft work account because they lost the phone containing the Microsoft Authenticator app and did not configure a backup verification method.

Product: Microsoft Authenticator
Device & OS: not provided
Scenario: Attempting to sign in to a Microsoft work account on a new device without access to the old device's authenticator app.
Observed behavior: The sign-in process demands approval from the old device's Authenticator app, offering no alternative sign-in options and completely blocking account access.

Before you start

Before proceeding, check if your sign-in screen offers a 'Sign in another way' link, as you might have previously set up SMS or email as a backup. If no alternative options exist, you will need administrative assistance to regain access.

Solution 1Recommended

Request an MFA Reset from Your Organization's IT Administrator

Use this method if you are a standard user or employee within an organization. Your IT administrator has the tools to reset your multifactor authentication settings remotely.

Microsoft 365 administrators have the ability to manage user authentication methods from the Microsoft Entra ID (formerly Azure AD) portal. By requesting a reset, the system will forget your old phone and allow you to register a new one upon your next login.

Contact your IT Helpdesk

Reach out to your organization's IT support team or Microsoft 365 administrator via phone or an alternative email.

Explain the situation

Inform them that you have lost your phone containing the Microsoft Authenticator app and have no alternative sign-in methods configured.

Request an MFA reset

Ask the administrator to go to the Microsoft Entra admin center and select 'Require re-register MFA' for your specific user account.

Sign in and re-register

Once the administrator confirms the reset, attempt to sign in to your work account again. You will be prompted with 'More information required' to set up Microsoft Authenticator on your new replacement phone.

Tip for New Setup: When setting up the Authenticator on your new phone, be sure to configure at least one alternative verification method, such as a phone number for SMS codes, to prevent future lockouts.

Solution 2

Contact Microsoft Data Protection (For Sole Administrators)

Use this method only if you are the sole global administrator for your organization's Microsoft 365 tenant and are entirely locked out of your account.

Free Microsoft Office alternative

Try WPS Office for a Hassle-Free Productivity Experience

While you are waiting for your Microsoft work account to be unlocked by your IT administrator or Microsoft Support, you can continue working on your local documents without interruption. WPS Office is a free, lightweight alternative that doesn't require complex cloud authentication just to edit your files.

1. Download and Install: Download WPS Office for free from the official website and run the lightweight installer.
2. Open Your Documents: Launch WPS Office and directly open your existing local documents, spreadsheets, and presentations.
3. Work Offline or Locally: Continue editing and saving your work securely on your local hard drive while your Microsoft account access is being restored.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Allows local file editing without forcing cloud-based multi-factor authentication.Lightweight software with fast installation and minimal system resource usage.Familiar user interface that requires zero learning curve for Microsoft Office users.

microsoft office alternative - wps office

Frequently Asked Questions

Can I restore my Microsoft Authenticator account from a cloud backup?

Yes, if you previously enabled the 'Cloud Backup' feature in the Authenticator app on your old phone, you can recover your credentials on the new device. Simply download the app, tap 'Begin recovery', and sign in with the personal Microsoft account used to create the backup.

Why didn't my Authenticator settings transfer over when I cloned my phone?

For security reasons, the Microsoft Authenticator app binds specific cryptographic keys to the physical hardware of your device. Cloning the phone or restoring from a general device backup does not transfer these security keys; the accounts must be re-registered or restored using the app's dedicated backup feature.

How long does it take for Microsoft Support to unlock an admin account?

If you are a sole administrator relying on the Microsoft Data Protection team, the account recovery process can take anywhere from a few hours to several weeks. Because of strict security protocols, they must thoroughly investigate and verify your identity and business ownership.

How can I prevent getting locked out of Microsoft Authenticator again?

To prevent future lockouts, always register at least two different authentication methods (such as the Authenticator app and a mobile phone number for SMS). Additionally, consider enabling the 'Cloud Backup' feature inside the Microsoft Authenticator app settings.

Login & Account Issues