Share via

Authenticator app is not letting me us my personal account as admin

Anthony Ockerse 0 Reputation points
2026-03-25T02:09:48.74+00:00

My previous employer installed Authenticator app.

I no longer work there and deleted my email associated with it.

i reset account and emails associated with Authenticator app.

I can’t log into Microsoft account.

I cant establish myself as admin over my accounts to continue to use Authenticator app as i have paid for a full year.

Outlook | Web | Outlook on the web for business | Sign in
0 comments No comments

2 answers

Sort by: Most helpful
  1. Sophie N 14,210 Reputation points Microsoft External Staff Moderator
    2026-03-25T06:47:44.4866667+00:00

    Dear @Anthony Ockerse,

    I understand how frustrating it is to be locked out of your personal account, especially after carefully trying to reset your credentials and having a paid subscription active. Since your Authenticator app was originally configured by a previous employer, the "Admin" restriction you’re seeing is likely a remnant of their organization’s security policy still affecting the app or your device's registration.

    Because you have already attempted to reset the emails and accounts but are still hitting a wall, here is the most direct path to regain control:

    If this is a work or school account user:

    You will need to contact your IT administrator or help desk. They are the only ones with permission to reset your multi-factor authentication settings. They can do this in the Microsoft Entra admin center by selecting your account and choosing "Require re-register multifactor authentication". Once they do this, you can set up the Authenticator app on your new phone from scratch.

    If you are the only administrator and are completely locked out: Since no one else in your organization can reset MFA for you, you will need to contact Microsoft Support directly. Please call the Microsoft Support phone number for your region. You can find it here: Customer service phone numbers - Microsoft Support. When you call, explain that you are a global administrator locked out of your tenant and ask to be connected to the Data Protection team, as they handle these specific recovery scenarios.

    If this is a personal Microsoft account (e.g., outlook.com, hotmail.com): You can attempt account recovery by visiting Recover your account. Select "I don't have my Authenticator app" and follow the prompts to verify your identity using other methods like SMS or email. If you don't have access to those, the recovery form is your best option.

    I hope this information helps you resolve the issue. If you need further clarification, please let me know.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  2. Q&A Assist
    2026-03-25T02:10:00.4833333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    Because the previous employer-managed work account and its Authenticator setup are no longer valid, the old work identity cannot be used to manage or recover a personal Microsoft account or its MFA settings.

    For a work or school account, only the organization’s IT admin can reset MFA or remove old Authenticator registrations. If that account and tenant are gone or no longer accessible, the organization (not the end user) must work with Microsoft support to recover or deprovision it.

    For a personal Microsoft account (Outlook.com, etc.), when access is lost due to Authenticator and no valid sign-in method remains, recovery must go through Microsoft’s account recovery and security flows. End users cannot “make themselves admin” over a locked personal account outside those flows.

    If the locked account is actually a business/tenant admin account and there is no other admin:

    • Microsoft’s Data Protection team must verify identity and reset the admin’s authentication methods. This is done by opening a support case via the global customer service phone numbers and clearly stating that the only global administrator is locked out due to Authenticator/MFA.
    • If direct contact fails, a temporary new tenant can be created on a trial Microsoft 365 subscription, then a support ticket raised from that tenant asking the Data Protection team to help recover the original tenant admin, as described in the referenced Q&A threads.

    Once MFA is reset by an admin (or Data Protection), the next sign-in will prompt to re-register Microsoft Authenticator and any passkeys or other methods as needed.


    References:

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.