A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because the existing two-step verification method (old phone system) is no longer accessible, tenant access must be recovered through Microsoft’s standard identity verification and support processes. There is no way for support or anyone else to bypass verification or simply “turn off” MFA for the account.
Use these steps, in order:
- Confirm the correct admin account and try normal recovery paths
- Go to the Microsoft 365 admin portal:
https://admin.microsoft.com. - Try signing in with the known admin email address.
- If prompted to request admin access or reset, follow the on-screen steps.
- If you see verification options that you still control (for example, an alternate email or mobile number that is not the old office phone system), use those to complete sign-in.
- Go to the Microsoft 365 admin portal:
- If no verification method works, initiate tenant access recovery via Microsoft 365 support
- Go to the Microsoft 365 support page and choose the option such as I can't sign in or access my tenant.
- Submit a support request explaining that:
- This is a nonprofit Microsoft 365 tenant.
- The global admin account’s MFA is tied to a phone system that no longer exists (moved to VoIP).
- There is no other global admin.
- Be prepared to provide identity and organization ownership proof, such as:
- Official business/nonprofit registration documents.
- Domain ownership evidence for your email domain.
- Publicly listed nonprofit registration data.
- Microsoft for Nonprofits and front-line support cannot bypass identity verification or directly reset MFA; they will route the case through the Microsoft 365/Data Protection process to restore admin access once ownership is verified.
- If you cannot open a ticket from the locked tenant, use a separate account/tenant to reach support
- If needed, sign in with any other Microsoft account (even a newly created one) to contact Microsoft 365 support and open a ticket about the locked nonprofit tenant.
- Clearly state in the ticket that:
- The issue is loss of access to the existing nonprofit tenant’s global admin due to an obsolete MFA phone method.
- You are trying to recover admin access, not to manage the new account.
- If a partner or reseller manages the tenant
- If a Microsoft partner or reseller originally set up the nonprofit tenant, contact that partner and ask them to open a Microsoft 365 support request on your behalf for tenant admin/MFA recovery.
- After access is restored
- Sign in as global admin and immediately:
- Add at least one additional global admin.
- Configure multiple MFA methods (mobile app, SMS to a mobile device, alternate email, and, if possible, security keys) so that losing one method (like a phone system) does not lock out the organization again.
- Sign in as global admin and immediately:
These are the only supported paths; Microsoft for Nonprofits and general support cannot override MFA or tenant ownership checks. All changes must go through the documented identity verification and support workflow.
References: