I changed phones and can no longer complete MFA for my Microsoft 365 business account. I’m the only global administrator, and revoking sessions signed me out of my remaining devices too. What’s the right recovery route, and what should I set up once I’m back in?
Locked out of Microsoft 365 after changing phones. What can I do?
Asked by
9F__Worlen
Answers
If you’re truly the only administrator and no registered MFA method works, this usually needs Microsoft’s tenant or administrator recovery process. Contact Microsoft support and explain plainly that you are the sole global administrator locked out by MFA. Ask for the account protection or tenant recovery team, and be ready to verify your identity and control of the business domain. A backup contact email or phone may help with communication, but it does not necessarily provide a way around MFA.
There may be delays, so avoid repeatedly changing settings or following unverified recovery instructions. If your Microsoft 365 subscription came through a reseller or service provider, ask whether they can open a support case on your behalf.
Reply to this answer
Before assuming there’s no other route, check the sign-in screen for an option to use another method. If a text message or another previously registered method is offered and you still control it, that may get you through. Don’t remove or reset anything else while locked out.
If no usable method appears, stop trying to self-remediate and go through Microsoft support. This is different from simply having an active browser session, since revoking sessions can invalidate those sessions and require MFA again.
Reply to this answer
Once access is restored, make the recovery plan part of the setup, not a someday task. Create a separate emergency administrator account, keep its credentials secured, and choose authentication that does not depend on the same phone you use every day. Also add a second trusted administrator if that fits the business. Test the recovery options before changing or wiping an old device.
Reply to this answer
Add your answer
Answers are reviewed before publication.
9F__Worlen:
So having a recovery phone listed might not be enough to get back in?
5E~Norrick:
Right. It can be useful for verification, but whether it offers a working sign-in option depends on the tenant’s configured methods and recovery process.