How to Reset Microsoft Multi-Factor Authentication (MFA)
Created: 06/19/2025
Last Updated: 06/19/2025
Summary:
This article walks through the process of resetting Microsoft MFA for users who have lost access to their authentication method (e.g., phone or authenticator app).
Applies To:
System/Platform: Microsoft 365, Azure AD
User Level: Tier 1, All Staff
Steps:
Contact IT/Admin:
A user cannot reset MFA on their own without access to a recovery method. Submit a support ticket or contact your IT administrator.
Admin Reset (For IT):
Go to the Microsoft 365 Admin Center.
Navigate to Users > Active users.
Select the affected user.
Under Authentication Methods, click Manage multifactor authentication.
On the MFA settings page, search for the user again, check the box next to their name, and click Manage user settings.
Select Require selected users to provide contact methods again and click Save.
User Re-registration:
The next time the user logs in, they will be prompted to set up MFA again (via Microsoft Authenticator, phone, or alternate method).
Troubleshooting Tips:
If the reset option doesn’t show, verify the user is licensed for MFA and has MFA enabled in security defaults or Conditional Access.
Users may need to clear saved logins or cached tokens in their browser.
If you're using Conditional Access policies, ensure the reset does not conflict with policy enforcement.
Related Articles:
[Setting Up Microsoft MFA for the First Time]
[Troubleshooting Microsoft Authenticator Issues]
Contributor Notes (Optional):
Updated to reflect Azure AD changes following Microsoft Entra rollout in early 2025.
License:
This article is shared under a Creative Commons Attribution 4.0 International License. You’re free to copy, share, or adapt it as long as you give credit.