MFA & Verification Issues

Reset Microsoft Entra MFA After Changing Administrator Password

Natalie Taylor Sep 29, 2026 869 views

Question details

An administrator is locked out of their account after a password change because they cannot approve the sign-in request using their unavailable Authenticator app.

How to Reset Microsoft Entra MFA After Changing an Administrator Password

Product: Microsoft Entra ID
Device & OS: not provided
Scenario: Administrator account recovery when the registered multifactor authentication (MFA) method is no longer accessible.
Observed behavior: During sign-in, Microsoft Entra ID repeatedly requests approval or a verification code from an Authenticator registration that the user can no longer access, offering no alternative verification methods.

Before you start

Check with your IT team to see if there is another active Global Administrator account in your Microsoft tenant, as they can bypass the lockout and reset your MFA settings immediately.

Solution 1Recommended

Require MFA Re-registration Using Another Global Administrator

The fastest and easiest way to regain access is to have another active global administrator force an MFA re-registration for your locked account.

This process removes your old authentication method registration and prompts you to configure a new one the next time you sign in.

Sign in to Microsoft Entra

Have the secondary global administrator sign in to the Microsoft Entra admin center using their active credentials.

Locate the locked account

In the left navigation menu, go to Users, select 'All users', and search for your affected administrator account.

Access authentication methods

Click on the affected user profile, scroll down the left pane to the Manage section, and select 'Authentication methods'.

Require re-registration

Click the 'Require multifactor authentication re-registration' option at the top of the screen. You can now sign in and set up your Microsoft Authenticator app from scratch.

Require MFA Re-registration Using Another Global Administrator

Setup Prompt: Upon your next login attempt, Microsoft Entra will display a 'More information required' screen, allowing you to scan a new QR code with your Authenticator app.

Solution 2

Contact Microsoft Support for Administrator Recovery

Use this method if you are the only global administrator in the tenant and are completely locked out without any alternative access.

Free Microsoft Office alternative

Stay Productive with WPS Office During Admin Lockouts

While waiting for Microsoft Support to recover your global administrator account, you can continue managing your critical business documents locally with WPS Office. It is a lightweight, highly compatible, and free alternative to Microsoft Office that does not rely on cloud tenant sign-ins.

1. Download the installer: Visit the official WPS Office website and click the Free Download button.
2. Install WPS Office: Run the setup file and follow the quick installation prompts on your computer.
3. Open your files offline: Launch WPS Office to instantly open, edit, and save your existing Microsoft Office documents without needing tenant access.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx) so your team's files remain accessible.Lightweight local installation that works perfectly offline without requiring Microsoft Entra ID authentication.Completely free to use with a familiar, easy-to-navigate tabbed interface.Built-in PDF editing toolkit for reviewing and signing critical business contracts.

microsoft office alternative - wps office

Frequently Asked Questions

Can Microsoft community forum moderators help reset my MFA?

No. Microsoft community forum moderators and standard support agents do not have the backend administrative access required to reset multifactor authentication settings for tenant administrators. You must go through the Data Protection team.

Why doesn't the standard account recovery form work for my admin account?

Standard automated recovery forms are strictly designed for personal Microsoft accounts (like Outlook.com or Xbox). Work or school accounts managed via Microsoft Entra ID are governed by organizational security policies and require manual verification.

How can I prevent being locked out as the sole administrator in the future?

It is highly recommended by Microsoft to create at least one 'break-glass' or emergency access administrative account in your tenant. This account should have global admin privileges, be excluded from strict conditional access MFA policies, and have its highly complex credentials stored in a secure physical location.

Login & Account Issues