Microsoft authenticator reset

Tai Ceasar 0 Reputation points
2026-11-08T15:09:55.15+00:00

I am the Microsoft 365 administrator for my nonprofit organization. I recently replaced my phone and no longer have access to the previous device registered with Microsoft Authenticator. Email is <Moderator's note: Personal Identifiable Information removed>@serving4equity.org

I know my account password and can receive email verification codes, but Microsoft continues to require authentication through the Authenticator app on my old phone.

I am unable to access the Microsoft 365 Admin Center to reset my authentication methods.

I need assistance with administrator account recovery and an MFA reset so I can register Microsoft Authenticator on my new phone.

Moderator's note: Moved from: Microsoft Security | Microsoft Authenticator

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments

2 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Dora-T 2,080 Reputation points Independent Advisor
    2026-11-08T23:44:58.14+00:00

    Hi @Tai Ceasar

    If there is another Global Administrator in your tenant, you can ask them to follow this article to reset your MFA methods so that you can register them again: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID |…    

    If you are the sole administrator and cannot sign in because you are unable to complete the MFA verification, you may need to contact Microsoft Support for further assistance.

    1.Contact Microsoft Support by phone: Customer service phone numbers - Microsoft Support  

    When a call is made to support, the first step is to provide an automated voice response from AI. You won't be able to speak to a support representative if you don't respond appropriately here.   

    Here's an example of a response that actually led to a support representative. Please refer to it: 

    Q. Can you tell me if you are calling as a home user who uses a product or service at home or a business user who uses it in your business to provide the best assistance? 
A.I am a business user. 
Q. Thank you. Can you give me the details of your inquiry? 
A. Login technical support. 
Q. First of all, can you tell me which products you are inquiring about today? 
A. Microsoft 365 business Standard。 
Q. Please wait a moment, I understand Microsoft 365. Are you calling about a new case or an existing one? 
A. New. 
Q. To receive phone support, your phone number must be associated with your Microsoft 365 admin profile. To do this, go to aka.ms/m365profile. Again, it aka.ms/m365profile . This can take 48 hours. In the meantime, you can go to aka.ms/m365profile and file a case online. If you prefer, you can also text the link to the phone number you are calling. What do you think? 
A. The phone number is already linked to the link. 
Q. Can you tell me about the products in your inquiry? 
A. Microsoft 365 Business Standard. 
Q. Are you a Global Administrator? 
A. That's right. 
Q. I'm sorry. I didn't understand. Are you a global administrator for your domain? 
A. Yes, I am a global administrator for the domain. 
Q. If you have any inquiries, you can contact a Microsoft representative. Are you sure? 
A. Yes. Please. 
Q. Yes, I understand. Please wait a moment.

    Once connected, the agent will be able to create a ticket for you under the affected tenant and then transfer this ticket to Data Protection team who could help you to regain access.   

    Please note that this team is always overwhelmed, so you might need to wait for them to call you, this should take 3-10 working days. I know that this is not a convenient solution to hear but it seems to be the only way. To help prevent similar situations in the future, it's recommended that you have a secondary (backup) Global Administrator so you can resolve this type of issue on your own if it happens again.   

    2.If you are unable to reach the appropriate support team by phone, you can consider directly submitting a support request as a helpful workaround:     

    -Create a temporary Microsoft 365 tenant using a trial license: Go to Microsoft 365 Business Plans and Pricing and click Try for free to set up a temporary Microsoft 365 tenant with a trial license.     

    -Use this new account to sign in to the Microsoft 365 Admin Center and submit a support request on behalf of your primary (locked) account.    

    -Select the Help & support (headset) icon >If Support Assistant is enabled, turn it off >Type contact support in the search box >Select Contact support, then choose Phone or Email to submit your request. 

    Note: This method doesn't require you to use your new account for your business. Instead, it allows you to create a temporary global administrator account so you can submit a support request, as your original global administrator account is locked out due to issues with multi-factor authentication. The trial account is free for one month. Be sure to delete it after submitting your support request to avoid any automatic renewals or charges from Microsoft.      

    For further instructions, you can refer to the following Microsoft guides: 

    Get support - Microsoft 365 admin | Microsoft Learn.    

    Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn 

    I hope this information helps.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-11-08T15:10:38.5566667+00:00

    If another privileged administrator exists, have them require MFA re-registration for your account; if you are the only administrator, open a tenant-access recovery case with Microsoft Support.

    If another administrator can sign in

    The administrator must hold at least the Authentication Policy Administrator role. A Privileged Authentication Administrator is appropriate when resetting authentication for a Global Administrator.

    1. Sign in to the Microsoft Entra admin center.
    2. Go to Users and select your administrator account.
    3. Select Authentication methods.
    4. Select Require re-register for multifactor authentication.
    5. Select OK.
    6. Sign in again and follow the prompts to register Microsoft Authenticator on the new phone.^1^

    Re-registration clears the existing MFA methods, so the next sign-in starts registration again. Email verification availability does not let an administrator bypass an Authenticator challenge when the tenant’s sign-in policy requires that method.

    If you are the only administrator

    Because you cannot enter either admin portal, this is a tenant lockout, not an Authenticator application repair. Microsoft Support must verify ownership and restore access to the existing tenant.^2^

    1. Open Microsoft’s official customer-support contact page and select the business support number for your country or region.^3^
    2. Tell the automated system or agent:
      • Product: Microsoft 365 for business
      • Issue: Global Administrator locked out by MFA after replacing phone
      • Request: Create a tenant-access recovery case for an MFA reset
      • Other administrator available: No, if that is accurate
    3. Ask that the case be routed to the team handling tenant access/Data Protection identity verification.
    4. Be prepared to establish organization and tenant ownership. For a nonprofit, Microsoft may request official organizational documentation, domain ownership evidence, or publicly listed nonprofit registration information.^4^
    5. Do not post account, tenant, billing, or identity-verification details in this public forum.

    If a Microsoft partner created or manages the tenant, contact that partner first. A partner with an active delegated relationship and the required privileged role may be able to reset MFA without Microsoft intervention.^5^

    About restoring Authenticator

    Restoring an Authenticator backup will not restore credentials for a Microsoft 365 work or school account. It restores only the account name; the account must still be signed in and registered again.^6^

    After access is recovered:

    • Register Authenticator on the new phone.
    • Remove the old phone’s authentication method.
    • Maintain at least one additional appropriately privileged administrator with separate credentials and MFA methods. Microsoft specifically recommends a Privileged Authentication Administrator as protection against Global Administrator lockout.^7^

    References

    1. Troubleshoot combined security information registration
    2. Plan for tenant recoverability
    3. Contact Microsoft customer support
    4. Tenant access recovery
    5. Preventing tenant lockouts
    6. [Android](https://support.microsoft.com/authenticator/restore-account-credentials-from-microsoft-authenticator#what-information-is-restored-in-authenticator)
    7. About administrator roles in the Microsoft 365 admin center
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.