Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Your organization’s IT administrator must reset your MFA registration or issue a Temporary Access Pass because the work account currently has no independent verification method available.
Ask IT to restore access
Send your help desk or Microsoft 365 administrator this request:
My work account is stuck in an MFA registration loop. “I can’t use my Authenticator app” only offers an Authenticator code, and I cannot access Security info. Please either Require re-register MFA for my account or issue a Temporary Access Pass so I can register Authenticator again.
Option 1: Require MFA re-registration
An Authentication Administrator can:
- Sign in to the Microsoft Entra admin center.
- Go to Entra ID → Users.
- Select your account.
- Select Authentication methods.
- Select Require re-register MFA and confirm.
This removes the registered Authenticator apps, phone numbers, software OATH tokens, and hardware OATH registrations. At your next sign-in, Microsoft Entra requests registration of a new MFA method.^1^
After IT completes the reset:
- Start a fresh browser session and sign in with your work account.
- When prompted to secure the account, choose Microsoft Authenticator.
- In Authenticator, select Add account → Work or school account → Scan a QR code.
- Scan the QR code displayed in the browser.
- Complete the test notification or code challenge.
- If your organization permits another method, add it afterward under Security info to avoid another single-method lockout.
Option 2: Issue a Temporary Access Pass
Instead of deleting all registered methods, the administrator can issue a Temporary Access Pass (TAP). A TAP is a time-limited passcode intended to help users recover when a strong authentication method is unavailable.^2^
Once IT gives you the TAP:
- Open Authenticator.
- Select Add account → Work or school account → Sign in.
- Enter your work email address.
- Use the TAP when prompted.
- Complete the registration instructions.
Microsoft documents this as a direct way to register Authenticator without first having an existing Authenticator registration.^3^
Why the current screen cannot resolve it
The “I can’t use my Authenticator app” link only displays authentication methods already registered and allowed by your organization. Since the only offered method is Authenticator, there is no usable self-service route through that screen. Reinstalling Authenticator will not create a new work-account credential: work or school credentials are not restored from Authenticator backup and must be registered again.^4^
Do not use the personal Microsoft account recovery process for this work email. Its authentication methods are controlled by your organization’s Microsoft Entra tenant.
References
- Manage user authentication methods for Microsoft Entra multifactor authentication
- Configure Temporary Access Pass to register passwordless authentication methods
- Enable passwordless sign-in with Authenticator
- [Android](https://support.microsoft.com/authenticator/restore-account-credentials-from-microsoft-authenticator#what-information-is-restored-in-authenticator)