Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Ask your company’s IT administrator to reset your Microsoft Entra multifactor authentication (MFA) methods, then register Microsoft Authenticator again on your new phone.
1. Try an existing backup method
On the sign-in screen, select Sign in another way. Use any method previously registered, such as SMS, a phone call, passkey, security key, or another Authenticator device.
If no alternative works, you cannot restore access using only your password; contact the company’s IT administrator. Microsoft also directs users who lost a registered phone to their IT administrator for account recovery.^1^
2. What your administrator must do
Send your IT administrator these instructions:
- Sign in to the Microsoft Entra admin center with at least the Authentication Administrator role.
- Open Entra ID → Users.
- Select your user account.
- Select Authentication methods.
- Select Require re-register MFA, then confirm.
This removes the old Authenticator registration and other listed MFA methods so that you are prompted to configure new methods at your next sign-in.^2^
If the phone was lost or stolen, ask the administrator to also select Revoke sessions, which forces reauthentication in active applications.^2^
3. Register the new phone
After IT completes the reset:
- Sign in again with your company account.
- Follow the prompt to configure Microsoft Authenticator.
- In Authenticator, select + → Work or school account → Scan QR code.
- Complete the test notification.
- Open your account’s Security info page and add another method permitted by your company, such as a phone number or passkey.
Microsoft recommends having multiple sign-in methods so losing one device does not lock you out again.^3^
If you are the company’s only administrator
If there is no other Global Administrator or Authentication Administrator:
- Use an emergency/break-glass administrator account if your organization has one.
- Otherwise, submit an unauthenticated Microsoft 365 support request and choose I can’t sign in: https://admin.microsoft.com/AdminPortal/Home#/support/unauthenticated
Microsoft Support must verify ownership before resetting authentication for a sole administrator.^4^
Do not share your password, verification codes, or Authenticator approval requests with anyone claiming they can unlock the account.
References
- Set up multifactor authentication for your Microsoft 365 account | Microsoft Support
- Manage user authentication methods for Microsoft Entra multifactor authentication
- Sign in to your work or school account using two-step verification | Microsoft Support
- Urgent Assistance Required – Unable to Access Microsoft Admin Portal Due to Lost Authenticator - Microsoft Q&A