Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
The recovery method depends on whether this is a personal Microsoft account or a work/school account; use another registered sign-in method if available, otherwise replace the personal account’s security information or ask the organization’s IT administrator to reset MFA.
Personal Microsoft account
This includes accounts such as Outlook.com, Hotmail, Live, Xbox, or a personally purchased Microsoft 365 subscription.
- On Verify your identity, select Sign in another way, I can’t use this method, or a similar option.
- If an alternate email, another phone number, recovery code, passkey, or Authenticator method is listed, select it and complete verification.
- If you have lost access to every listed method:
- Select I don’t have any of these.
- Enter security information you can currently access.
- Follow the prompts to replace the old information.
After all security information is replaced, Microsoft requires a 30-day waiting period before you can sign in. If you regain access to the old verification method and use it during that period, the security-information replacement is cancelled. ^1^
If you still have access through another registered method, sign in to Advanced security options, choose Add a new way to sign in or verify, confirm the new method, and then remove the lost phone. Do not remove all existing security methods simultaneously, because that can also restrict the account for 30 days. ^1^
Microsoft Support cannot send a verification code or manually change personal account details, so it cannot bypass this security process.
Work or school account
This includes Microsoft 365 business, Azure, Intune, or an account issued by an employer or school.
- At the verification prompt, select Sign in another way or Other verification options.
- Use any previously registered alternative, such as SMS, a phone call, security key, passkey, or another Authenticator device.
- If no alternative works, contact your organization’s IT help desk or Microsoft 365/Entra administrator and ask them to clear or reset your MFA authentication methods.
- After the reset, sign in again and register Microsoft Authenticator on the replacement phone.
Microsoft’s guidance for a lost work/school device is to use another method or have the organization’s help desk clear the settings; after they are cleared, registration is requested at the next sign-in. ^2^
If your account is itself an administrator account, another cloud administrator can reset its MFA settings and require the account to provide contact methods again. ^3^
If you are the organization’s only administrator and have no other registered method, the available documentation does not provide an end-user bypass. A Microsoft support case is required so tenant ownership and identity can be validated.
Once access is restored, register at least one backup sign-in method before removing the lost phone.
References