I can't access Azure using my Personal Account

Daniel Kling 0 Reputation points
2026-10-22T22:46:59.52+00:00

This is regarding my personal Microsoft account. I can login fine to my Microsoft account using the Authenticator app, no problem. But when I try to login to Azure using the same account, it seems to be using a different authenticator profile because I don't get the codes or request on my app. I can't even input the code generated by the authenticator because it's 8 digits but Azure login is expecting 6 digits.

I think at some point I logged in to Azure with my personal email, asked me to set up a separate authenticator profile, which I probably did, but now it is no longer on my phone. Maybe because I have changed phones recently. So, I have no way to access that old authenticator profile.

I have tried multiple times to login to Azure again and again and in some instances it would say that I don't have access to that tenant ID or something. I think there is a EXT/onmicrosoft account thing associated with my personal microsoft account and that's the one that I should be using on my authenticator, but I don't have. And it seems there is no way to reset that MFA to do it all over again, even though it's my personal email account. The only options I get is to send a request to my device or input the code, which is basically the same, as I don't have that with me. There is no other way to recover my account.

In any case, I have a billing subscription setup on my Azure account. I need access to be able to manage, and I am terrified now that I don't get access that if Azure went hay wire, I would have no way of stopping it.

I have tried to contact Azure/Microsoft support, but every link takes you to the Azure Portal or to Office 365 portal which require login. I was able to get on a chat with Microsoft, but they were of no help. Please help!

Microsoft Security | Microsoft Authenticator

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-10-22T22:47:58.06+00:00

    This is a Microsoft Entra tenant MFA lockout; if no other administrator can reset the tenant identity associated with your personal email, contact the Azure Data Protection team and request recovery of the tenant before addressing the subscription.

    The 8-digit code for your personal Microsoft account is not interchangeable with the 6-digit MFA code requested by the Azure tenant. A personal identity can exist as an external/guest user in a Microsoft Entra tenant, and that resource tenant can require its own MFA registration.^1^

    If another tenant administrator exists

    Ask another Global Administrator to reset your tenant MFA:

    1. Sign in to the Microsoft Entra admin center.
    2. Go to Identity → Users → All users.
    3. Open the affected user—possibly displayed with an external/guest identity containing #EXT#.
    4. Select Authentication methods.
    5. Select Require re-register multifactor authentication.
    6. Sign in again and register Authenticator on the new phone.

    This procedure resolved the same scenario where a personal Microsoft account had been added to the tenant as a guest account.^2^

    Do not create another Global Administrator unless an account that already has sufficient administrative access can do so.

    If you are the only administrator

    Your personal Microsoft account’s security settings cannot reset a separate Entra tenant MFA registration. The matching tenant-lockout case was escalated through a support ticket to Microsoft’s Data Protection team.^3^

    Because portal-based support is inaccessible:

    1. Contact the Azure Data Protection team using the published number +1 866-807-5850. Microsoft identifies this team as the recovery route when the affected person is the only Global Administrator.^4^
    2. State clearly:
      • This is an Azure/Microsoft Entra tenant lockout, not recovery of the personal Microsoft account.
      • The personal account can access account.microsoft.com, but cannot satisfy the tenant’s old MFA registration.
      • The previous Authenticator registration was lost during a phone change.
      • No alternate tenant authentication method is available.
      • You are the only administrator, if that is the case.
      • An active Azure subscription is attached and billing containment is urgent.
    3. Have the subscription ID, tenant ID shown in the error, billing details, invoices, and proof of ownership available. Do not post these publicly.
    4. Obtain and retain the support-case number.

    The same recovery path has resolved comparable personal-Azure lockouts after phone replacement.^5^

    Protect the subscription

    Tell Data Protection or Azure support that the subscription might contain billable resources and that access restoration or billing containment is time-sensitive. Once access is restored:

    1. Open Azure portal → Cost Management + Billing → Subscriptions/Azure subscriptions.
    2. Select the subscription.
    3. To stop it entirely, select Cancel, review running resources, select Turn off resources, and confirm Cancel subscription. Back up anything required first because this stops resources.^6^
    4. If retaining the subscription, immediately inspect active resources and current costs instead of cancelling it.

    After recovery, register at least two independent authentication methods so losing one phone does not create another lockout.

    References

    1. Tutorial: Enforce multifactor authentication for B2B guest users
    2. Lost Microsoft Authenticator access – Unable to sign in to Azure portal – Need MFA reset help - Microsoft Q&A
    3. I can't access Azure with my personal microsoft account - Microsoft Q&A
    4. Troubleshoot sign-in issues and account access problems
    5. I could not login to my Azure account after losing MFA due to a phone change - Microsoft Q&A
    6. Cancel and delete your Azure subscription
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.