Locked out of Microsoft authenticator

Shane Dunne 0 Reputation points
2026-10-14T09:21:01.04+00:00

Basically I was using Microsoft authenticator for a different account (not this one), when I switched phone I wasnt logged into the authenticator app anymore but now every time I try to log into that account I have to use the authenticator app even though I factory reset my other Phone, I am soft-locked completely out of my other account.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Helen Luu 3,555 Reputation points Independent Advisor
    2026-10-16T06:29:31.78+00:00

    Hello @Shane Dunne

    you are unable to access your account because your MFA method is unavailable after switching to a new phone, please contact your IT administrator to have your MFA methods reset.

    If you are an administrator, you can contact another administrator in the tenant for assistance. However, if you are the only administrator or user in the tenant, you will need to contact Microsoft Support for assistance with recovering access to your account. Please locate the appropriate Microsoft support hotline for work account and contact the frontline support team so they can raise a ticket on your behalf: Customer service phone numbers - Microsoft Support    

    Please note that this is a user-to-user support forum. Only Data Protection team can help you to revoke the session and reset your password, account, MFA...

    Data Protection Team will first verify your ownership of the account and revoke your MFA once confirmed. After that, you can set up the Microsoft Authenticator app again on your new device. 

    Here are some tips and an example of a prompt to help you navigate the IVR more effectively:  

    (While calling, you can ignore the 30-second introduction that says "you can visit the link..." and wait until you are presented with the options. Press "1" as a business email user, and again "1" for technical help.)      

    In some regions, the initial interaction may be automated, here’s a general idea of how the conversation might go to help you prepare:

    • What kind of problem are you experiencing?         
    • Answer: Authenticator         
    • What products do you use?         
    • Answer: Office 365 for business         
    • Is this for an education or company account?         
    • Answer: For companies         
    • Are you an administrator?         
    • Answer: Yes         
    • Are there any other administrators in your organization?         
    • Answer: No. I am the only admin in my tenant          
    • Do you need a... Service request?          
    • Answer: Yes. I need to create a ticket. Please send me direct to the Data Protection Teams.

    If you can't contact Microsoft Support by phone, you can try creating a new trial tenant using the link below: Microsoft 365 Business Plans and Pricing | Microsoft 365 After you fill out and submit the sign-up form, you'll have access to the Microsoft 365 admin center.

    Once you've gained access, contact the Microsoft support team by following the guidance in the following document to create a support ticket: Get support - Microsoft 365 admin | Microsoft Learn

    When submitting a support ticket, please clearly indicate that the issue involves another tenant and provide as much information as possible about that tenant, including the tenant domain, domain registration details, administrator username... Providing this information upfront will help the support team validate the tenant relationship and investigate the issue more efficiently.

    After the issue is successfully resolved, remember to cancel your trial subscription by following the instructions in the following document: Cancel your Microsoft business subscription in the Microsoft 365 admin center | Microsoft Learn

    If you have any further concern, please feel free to let me know.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-10-14T09:21:53.5133333+00:00

    Contact your organization’s IT help desk and ask an Authentication Administrator to require MFA re-registration for your work or school account, which removes the old Authenticator registration and prompts you to configure the new phone at your next sign-in.^1^

    Before requesting the reset

    On the verification screen, select Sign in another way, Other verification options, or I can’t use my Microsoft Authenticator app right now.

    • If a previously registered option such as SMS, phone call, security key, or another authenticator is offered, use it.
    • After signing in, open your account’s Security info, add Authenticator on the new phone, and remove the old registration.
    • If no usable alternative appears, proceed with the administrator reset. Self-service password reset may also be unavailable if every registered authentication method was tied to the erased phone.^2^

    What to request from IT

    Send the help desk this request:

    I replaced and factory-reset the phone registered for Microsoft Authenticator and have no usable alternative verification method. Please verify my identity and select Require re-register MFA for my account.

    An Authentication Administrator should:

    1. Sign in to the Microsoft Entra admin center.
    2. Go to Entra ID → Users.
    3. Select your user account.
    4. Open Authentication methods.
    5. Select Require re-register MFA.^1^

    This action deletes the account’s registered Authenticator apps, phone methods, and software OATH tokens. At your next sign-in, Entra will require you to register a new MFA method. It does not merely reset your password, so ask specifically for MFA re-registration rather than only a password reset.

    Register the replacement phone

    After IT completes the reset:

    1. Install Microsoft Authenticator on the new phone.
    2. Sign in to the work or school service again.
    3. Follow the registration prompt.
    4. In Authenticator, add a Work or school account and scan the QR code displayed during setup.
    5. Complete the test approval or code prompt.

    Restoring an Authenticator backup alone is generally not sufficient for this scenario: for work or school accounts, only the account name is restored, and the account must be signed in and verified again.^3^

    If this is an unmanaged tenant where you are the only administrator, another administrator cannot perform the reset; contact Microsoft support through the organization’s support channel for tenant access recovery.^4^

    References

    1. Manage user authentication methods for Microsoft Entra multifactor authentication
    2. Common problems with two-step verification for a work or school account
    3. [Android](https://support.microsoft.com/authenticator/restore-account-credentials-from-microsoft-authenticator#unable-to-restore-authenticator-account-credentials)
    4. How to get back access to work company authenticator when I change to new phone - Microsoft Q&A
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.