HELP NEEDED: Broken Phone Locked out of Dev Account MS Auth Need to be Recovered

Because the phone with Microsoft Authenticator is broken and there is no access to the 2FA codes, recovery depends on what alternative sign-in or security options are still available on the dev account.

Follow the path that matches the situation:

1. If this is a personal Microsoft account (used for the Microsoft 365 Developer Program)

• If at least one security method (phone/email) still works:
  1. Sign in to the Advanced security options page of the Microsoft account using a working method.
  2. Select Add a new way to sign in or verify and add a new phone or email.
  3. Verify the new method with the code sent to it.
  4. Remove the old, inaccessible method under security info.
  Steps are described under “If you know your password, but have lost access to some, but not all, of your security info” in the verification code troubleshooting article.
• If all security info (phone/email/Auth) is lost but the password is known:
  1. Start sign-in to the Microsoft account.
  2. At the “Verify your identity” prompt, select “I don't have any of these”.
  3. Follow the prompts to replace security info.
  4. After replacement, there is a mandatory 30‑day wait before normal sign-in is allowed.
• If the password is also not available and no security info works:
  1. Read the guidance in Help with the Microsoft account recovery form.
  2. Submit the Account recovery form with as much accurate information as possible.
  3. Use a working email (can be a new Outlook.com address) to receive responses about the request.
  Note: If two-step verification was turned on and none of the alternate verification methods are accessible, support agents cannot override MFA or send reset links; recovery is only via the automated form.

2. If this is a work/school (Azure AD) dev tenant and the account is a tenant admin

• If there is another global admin in the tenant:
  • Ask that admin to reset MFA for the locked account from the Microsoft 365 admin center.
• If this is the only global admin account (sole admin):
  1. Call Microsoft’s global customer service phone line (see Customer service phone numbers - Microsoft Support in the Q&A guidance) and request escalation to the Data Protection team for an admin MFA reset.
  2. When guided by the automated system, clearly indicate:
     • The issue is with Authenticator / MFA.
     • The product is Office 365 for business / Microsoft 365 for business.
     • It is a company account.
     • The caller is the only administrator.
     • A service request is needed with the Data Protection team.
  3. Be prepared to provide tenant and admin details (admin UPN, tenant domain, contact info) so identity and admin rights can be verified.
• If phone support cannot be reached or a ticket cannot be opened from the locked tenant:
  1. Create a temporary trial Microsoft 365 tenant (for example, via a Microsoft 365 Business or Enterprise trial).
  2. Sign in to the new tenant’s Microsoft 365 admin center.
  3. Go to Support → Help & support and open a ticket.
  4. In the ticket, state clearly that access is needed to a different, existing tenant where the caller is the only global admin and is locked out due to MFA on a broken phone, and request Data Protection team assistance.
  5. After resolution, cancel the trial subscription in Billing → Your products to avoid charges.

3. If verification codes are not arriving (SMS/email backup methods)

• Avoid repeated or excessive code requests; this can cause temporary blocking of code delivery.
• Check:
  • SMS blocking settings on the phone.
  • That a real mobile number (not VOIP) is configured.
  • Junk/spam folder for messages from @accountprotection.microsoft.com.
• If still blocked, wait for the temporary block to clear and try again, or switch to another available verification method.

4. If still signed in somewhere (e.g., on a Windows PC or browser)

• While still signed in, immediately:
  1. Go to the account’s security settings.
  2. Add at least one additional sign-in/verification method (another phone, email, or passwordless method).
  3. Optionally, temporarily disable 2FA/MFA (if policy allows) to re-register the Microsoft Authenticator app on the new phone, then re-enable MFA.

These are the supported paths to recover access when Microsoft Authenticator on the original device is no longer available.

References:

• Troubleshoot Microsoft verification code issues
• Common problems with two-step verification for a work or school account
• Help with the Microsoft account recovery form
• Use a screen reader to set up and troubleshoot multifactor authentication
• I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
• How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
• I need to speak with a real person and it seems impossible. - Microsoft Q&A
• Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A
• Requesting a Tenant Admin MFA Reset - Microsoft Q&A