Microsoft 365 tenant lockout – sole global admin – MFA inaccessible

Arja Rintamaki 25 Reputation points
2026-01-01T23:01:37.63+00:00

I have a new phone (old phone longer exists). I am in a deadlock Authenticator loop with my Microsoft office 365 for business, as I cannot sign into any Microsoft services without Authenticator code. I have no alternative sign in methods.

I am the sole global admin. All MFA methods require Microsoft Authenticator, which is unavailable. No other admin exists. Web and phone recovery paths are inaccessible.

Please help asap.

Moved from: Microsoft 365 and Office | Other

Microsoft 365 and Office | Subscription, account, billing | For business | Other
Answer accepted by question author
Daniel-Vo 6,880 Reputation points Microsoft External Staff Moderator
2026-01-02T11:26:57.6233333+00:00

Dear @Arja Rintamaki,

Thank you for posting your question on the Microsoft Q&A forum.

Based on your description, you are unable to access your account due to two-factor authentication.

While you are discussing this matter with the independent advisor and waiting for a response, you may try my suggestions below. In your situation, you are the sole administrator in your organization, you will need to contact the Microsoft Data Protection team for further assistance. Please locate the appropriate support phone number for your country or region and contact Microsoft Support so the frontline team can raise a service request on your behalf: Customer service phone numbers

When calling the support number, the experience may vary depending on your country or region:

  • In some regions, you may hear an automated message for approximately 30 seconds. You can ignore this message and wait for the prompt, then select “1” for Business email user and “1” again for technical support.
  • In other regions, you may be guided through an automated conversation similar to the following:
    • The system asks what issue you are experiencing → Authenticator
    • Product in use → Office 365 for Business
    • Account type → Company account
    • Administrator status → Yes
    • Are there other administrators in the organisation? → No
    • Proceed to create a service request → Yes

If your Office 365 Business or Education subscription was purchased through a partner or reseller, and you are unable to open a service request directly, please contact your reseller’s support provider and ask them to raise the service request on your behalf.

Alternatively, if you are unable to reach support by phone, you may create a temporary trial tenant to submit a support request for the block access tenant through the Microsoft 365 admin centre. You can start with a trial license here: Microsoft 365 Business Plans and Pricing | Microsoft 365

User's image

Please note that forum moderators do not have the ability to access or modify user accounts, including login issues, password resets, or MFA changes.

I hope the above methods will be able to assist you in restoring access.

Thank you for your patience and understanding. I hope the information above is helpful. If you have any further questions, please feel free to reach out.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Arlene D 36,270 Reputation points Independent Advisor
    2026-01-02T01:59:58.3033333+00:00

    Hello! Thanks for reaching out.

    If you are the only global admin and every sign in needs Microsoft Authenticator from your old phone, there is no self-service recovery, so the supported action is to contact Microsoft Support so they verify your ownership and reset MFA for your tenant.

    Use the Microsoft global support phone list and pick your region without signing in: https://support.microsoft.com/help/4051701/global-customer-service-phone-numbers

    and see the official Microsoft 365 admin support guidance here Tell them you are the sole global admin, the old phone is gone, no backup sign in exists, and you are locked out.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.