Unable to use Authenticator app so I can no longer login to my work email

Dear @Mitch Deer,

I completely understand how frustrating it is to be locked out, especially after switching to a new phone.

In this situation, since you are using work account provided by your company and you no longer have access to the Microsoft Authenticator app, as well as there are no alternative verification methods available, the only way to regain access is through your organization’s IT administration, as this is controlled entirely by your organization’s security policies and cannot be bypassed externally.

For more information, please refer to the official Microsoft documentation: Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn  

Therefore, please try to reach out to your company using any available offline or alternative method, such as calling your company IT helpdesk or support number, or using any other emails to contact your manager, a colleague, or your HR department to escalate the request on your behalf. They will be able to coordinate directly with IT to perform the MFA reset and restore your access.

Note: Please understand that as a forum moderator, my role is to provide general guidance and troubleshooting support. I don’t have access to internal systems or backend tools, and I appreciate your understanding of these limits.

I know this may feel inconvenient right now, but your IT team is the only group with the necessary permissions to resolve this securely.

The first response may not always resolve the issue right away, but with your help and more details, we can work toward a solution.

Thank you for your patience and understanding. I'm looking forward for your reply.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Because the work account is protected by Microsoft Entra multifactor authentication and the Microsoft Authenticator app is no longer available on the old phone, the MFA method must be reset by an administrator or by Microsoft support.

Use the following options based on the situation:

1. Try any alternative sign-in method

• If any other MFA method was configured (SMS, phone call, email, security key, Windows Hello, etc.), choose “I can’t use my Microsoft Authenticator app right now” or similar on the sign-in screen and select the alternative method.
• If SMS or email codes are not arriving, follow the guidance in “I'm not getting my verification code. What do I do?” including:
  • Avoid repeated code requests (this can cause a temporary block).
  • Check junk mail for codes from @accountprotection.microsoft.com.
  • Ensure the phone number is a mobile number (not VOIP) and that texts from unknown numbers are not blocked.

2. If there is an internal IT/admin for the tenant

• Contact the organization’s IT help desk or Microsoft 365/Entra admin using any channel that does not require the locked email (phone, in‑person, alternate email, internal portal, etc.).
• Ask them to reset MFA for the account in the Microsoft Entra admin center by requiring re‑register for multifactor authentication. After they do this, the next sign‑in will prompt to set up the Authenticator app again on the new phone.

3. If this is a business/organizational tenant and there is only one admin (the account that is locked)

• Microsoft’s Data Protection team must be involved to verify identity and reset MFA.
• Call Microsoft support using the regional Customer service phone numbers listed in the documentation.
• When navigating the phone system (IVR), clearly indicate:
  • The problem: “Authenticator / can’t complete MFA / locked out of admin account”.
  • Product: “Office 365 for business” or equivalent.
  • Account type: “Company account”.
  • Role: “I am the administrator”.
  • That there is no other administrator.
  • That a service request is needed and that the call should be routed to the Data Protection team to reset MFA for the tenant admin.

4. If support cannot be reached directly

• As shown in the referenced Q&A answers, one workaround is to:
  • Create a new trial Microsoft 365 tenant (separate from the locked tenant).
  • Sign in to the Microsoft 365 Admin Center of this new trial tenant.
  • Use Help & support there to open a ticket and explicitly state that access is needed to a different existing tenant where the account is locked behind MFA and there is no other admin.
  • Ask that the case be escalated to the Data Protection team for MFA reset on the original tenant.
  • After resolution, cancel the trial subscription to avoid charges.

5. If repeated sign-in attempts have been made

• Microsoft Entra MFA can temporarily block sign‑ins after many attempts or unusual activity.
• If many attempts were made, wait before trying again, or use a different MFA method if available.
• If malicious activity is suspected, an IT administrator should review Microsoft Entra sign‑in logs once access is restored.

Until MFA is reset by an admin or by Microsoft support/Data Protection, access to the work account cannot be restored because support agents are not allowed to bypass verification or change account details directly.

References:

• Common problems with two-step verification for a work or school account
• Authenticator Did Not Complete Login
• I cant log in to my business account because it is requiring Authenticator app which I do not have - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A