How to Recover Admin Microsoft Account with Lost MFA Access?

Dear @Saurabh Kochrekar,

Thank you for explaining your situation so clearly. I’m very sorry you’re running into this, losing access to your only administrator account due to MFA can be extremely stressful.

Based on what you’ve described, this is a full administrator lockout scenario caused by the loss of the only registered MFA method on a work account where you are the only admin in the tenant. Unfortunately, in this situation there is no self‑service recovery option available.

Please note that this forum is a user‑to‑user support space. Community moderators do not have access to tenant data, authentication settings, or account recovery tools, and are not able to reset MFA or restore admin access.

Because there are no other administrators and no alternative sign‑in methods configured, the only supported recovery path is through Microsoft’s Data Protection / Account Recovery process.

Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support 

When prompted, make sure to indicate that:

This is a work (company) account

You are an administrator

There are no other administrators in the organization

The issue is related to Microsoft Authenticator / MFA access loss

The frontline agent can then help create a support request for the appropriate backend team. Microsoft may require ownership and identity verification before any action is taken, which is a necessary security measure to protect the tenant.

If your Microsoft 365 subscription was purchased via a partner or reseller, you can also contact them and ask if they are able to open a Microsoft support request on your behalf.

If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Compare All Microsoft 365 Plans | Microsoft. This would allow you to create a new tenant following the provided prompts. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.  

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.  

Once access is restored, it’s strongly recommended to add at least one additional global admin and configure multiple MFA methods to prevent this scenario in the future.

I understand that this entire process can feel long and complicated, and I truly appreciate your patience while working through it. These steps are in place to protect the security of your account, so I hope you can understand why they are required. I sincerely hope you’ll be able to regain access to your account soon. If you need help at any point, or if you have any questions during the process, please feel free to reach out, I’m always here and happy to assist.  

Thank you again for your understanding and patience. 

Warm regards, 

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".    

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.   

Given this scenario, the account is effectively locked behind MFA with no alternative method or backup, so recovery depends on involving Microsoft support and the Data Protection team.

1. Confirm there is truly no alternative sign-in method
   • If this is a work or school account and there is any other admin in the tenant, that admin can:
     • Go to Microsoft Entra admin center → Users → All users → select the admin account → Authentication methods → Require re-register multifactor authentication. This forces MFA re-setup on next sign-in.
   • If there is no other admin and only Microsoft Authenticator was configured, proceed to the next step.
2. If this is a work or school account and you are the only admin
   • This is a tenant lockout scenario. The only supported path is via the Microsoft Data Protection team.
   • Call Microsoft support using the appropriate Customer service phone numbers - Microsoft Support entry.
   • When navigating the automated system, clearly indicate:
     • Issue: “Authenticator / MFA lockout”
     • Product: “Office 365 for business” (or Microsoft 365 for business)
     • Account type: “Company account”
     • Role: “Administrator”
     • Other admins: “No”
     • Request: Create a service request and route it to the Data Protection team to reset the admin’s authentication methods.
   • Be prepared to provide tenant and identity verification details (admin UPN, tenant domain, business information, etc.). The Data Protection team will validate ownership and then reset MFA so that a new method can be registered.
   • If direct phone support is hard to reach, an alternative is to:
     • Create a new trial Microsoft 365 tenant (separate from the locked one).
     • In the new tenant’s admin center, go to Support → Help & support and open a ticket.
     • In the ticket, clearly state that the request is about a different existing tenant where you are the only global admin and are locked out due to MFA, and ask to be connected to the Data Protection team.
3. If this is a personal Microsoft account (not work/school)
   • Use the Microsoft account sign-in helper and account recovery form to regain access to the Microsoft account that serves as the backup/recovery identity:
     • Start with the sign-in helper: Sign-in helper
     • If password or security info is also lost, follow: Help with the Microsoft account recovery form and submit via Recover account.
   • Once access to the Microsoft account is restored, use it to restore or reconfigure Microsoft Authenticator as described in the Authenticator recovery article.
4. If Authenticator backup cannot be restored
   • If the Authenticator backup account itself is inaccessible and cannot be recovered, support agents cannot restore Authenticator contents directly.
   • In that case, accounts must be re-added manually to Authenticator after the Data Protection team or another admin resets MFA for the work/school account, or after the personal Microsoft account is recovered.

In summary: with no alternative MFA method and no other admin, recovery of a work/school admin account requires contacting Microsoft support and having the Data Protection team reset the admin’s MFA. For personal accounts, use the Microsoft account recovery tools to regain access, then reconfigure Authenticator.

References:

• Restore account credentials from Microsoft Authenticator
• Common problems with two-step verification for a work or school account
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• Microsoft authenticator sending me into a spiral - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A
• Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A