Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Ask another Microsoft 365 administrator in your organization to require MFA re-registration for your account; if you are the only administrator, contact Microsoft business support and request recovery of a tenant locked by unavailable MFA.
If another administrator exists
Have an Authentication Administrator or appropriately privileged administrator:
- Sign in to the Microsoft Entra admin center.
- Go to Entra ID → Users.
- Select your business account.
- Select Authentication methods.
- Select Require re-register MFA, then confirm.
- Sign in again and register Microsoft Authenticator on your current phone, plus another permitted backup method.
This removes the registered phone numbers, Authenticator registrations, and software OATH tokens, then requires you to configure MFA again at sign-in. ^1^
If your company uses an external Microsoft 365 provider or IT consultant, ask whether they have delegated administrative access and can restore access for you.
If you are the only administrator
Use Microsoft’s support page, select the Work account section, and choose the customer-service number for your country or region: ^2^
When connected, state:
I am the only Global Administrator for a Microsoft 365 business tenant. I cannot pass MFA because the registered telephone is no longer available. I need a service request to recover access to the tenant and reset my authentication methods.
Microsoft may need to verify that you own or represent the tenant before restoring access. A directly matching Microsoft Q&A case advises requesting that the ticket be escalated to the Data Protection team when the only administrator is locked out by MFA. ^3^
About your recovery email
Access to the email address used when creating the business account does not necessarily satisfy its MFA challenge. In Microsoft Entra ID, an email authentication method can be used for self-service password reset, but not for authentication. ^1^
If the sign-in screen offers Other verification options, use any method that you previously registered. If it offers only the old telephone, the administrator-reset or sole-administrator support path above is required. Microsoft’s guidance for a lost or replaced phone is to contact the organization’s IT administrator. ^4^
After access is restored, register at least two allowed authentication methods and ensure the tenant has a separate emergency administrative recovery arrangement.
References
- Manage user authentication methods for Microsoft Entra multifactor authentication
- Contact Microsoft customer support | Microsoft Support
- No longer have phone to receive verification code so can't sign in - Microsoft Q&A
- Set up multifactor authentication for your Microsoft 365 account | Microsoft Support