Cannot log in to ANY MICROSOFTS!!!!!!

Select Sign in another way, Other ways to sign in, or I can’t use my Microsoft Authenticator app right now on the verification screen, then use any previously registered text message, phone call, email, security key, or other method.

If none appears, the required recovery path depends on whether this is an ordinary user account, an administrator account, or the tenant’s only Global Administrator.

If another verification or recovery option appears

1. Select the alternative method and complete verification.
2. After signing in, open your account’s Security info page.
3. Add a working method before removing or changing the unusable Authenticator registration.

If your organization configured account recovery, select Other ways to sign in and then Recover your account. The subsequent identity-verification process depends on the provider configured by your organization.^1^

If no alternate method is listed, one probably was not registered or your organization’s policy does not permit it; contact the administrator instead.^2^

If you are an employee or ordinary user

Ask your organization’s IT help desk or Microsoft 365 administrator to:

1. Sign in to the Microsoft Entra admin center.
2. Go to Entra ID → Users.
3. Select your user account, then Authentication methods.
4. Select Require re-register MFA.
5. Select Revoke sessions.
6. Have you sign in again and register Authenticator or another permitted method.

Require re-register MFA removes the registered Authenticator, phone, and software-token methods so that they can be configured again. Revoke sessions invalidates existing refresh tokens and forces authentication again. An Authentication Administrator can perform these actions for users within that role’s authority.^3^

Your administrator may instead issue a Temporary Access Pass, if your organization supports it. In Authenticator, select Add account → Work or school account → Sign in, then use that pass to register the account.^4^

If the affected account is an administrator

A privileged administrator account might be outside an ordinary Authentication Administrator’s authority. Ask another Global Administrator or appropriately authorized Privileged Authentication Administrator to recover the account and reset its authentication methods. Microsoft recommends retaining a Privileged Authentication Administrator specifically so a locked-out Global Administrator can be recovered.^5^

If you are the only Global Administrator

Microsoft must verify tenant ownership and assist with the lockout:

1. Contact Microsoft 365 business support using the regional business support numbers.
2. State: “The only Global Administrator is locked out by Microsoft Authenticator/MFA, and no other administrator can open a service request.”
3. Request a service ticket for the affected tenant and escalation to the Data Protection team.
4. Prepare the company name, subscription and billing details, registered telephone number, alternate email address, and other ownership information requested during verification.^6^

If Microsoft 365 was purchased through a reseller or Cloud Solution Provider, contact that provider first. A partner with active delegated access and the required roles may be able to restore access or open the support request.^7^

Do not repeatedly approve unexpected Authenticator prompts. Approve only a request that matches a sign-in you just initiated.

References

1. Perform account recovery in Microsoft Entra ID
2. Use a screen reader to set up and troubleshoot multifactor authentication | Microsoft Support
3. Manage user authentication methods for Microsoft Entra multifactor authentication
4. Enable passwordless sign-in with Authenticator
5. About administrator roles in the Microsoft 365 admin center
6. I am stuck in authenticator loop for my business account - Microsoft Q&A
7. Preventing tenant lockouts