- Why this happens
When you set up Authenticator for a work or school account, that account is tied to your old phone’s secure key.
If that phone is lost, reset, or replaced before you re-register the app, Microsoft has no way to verify you — so every login request fails or loops back to “Approve sign-in request.”
This is not something you can fix from your new phone alone; you need a reset or temporary access issued by your organization’s administrator or by Microsoft support if you are the admin.
- If this is a work or school account (Microsoft 365 / Entra ID)
You must contact your organization’s Microsoft 365 administrator or IT department.
They can reset your multi-factor authentication registration in a few clicks:
Admin steps:
- Sign in at https://admin.microsoft.com.
- Go to Users → Active users → [your name].
- Select Authentication methods → Manage multifactor authentication.
- Click Disable MFA (temporarily).
- You will then be able to sign in without MFA and re-enroll your device.
- Once re-enrolled, the admin can re-enable MFA.
If you are locked out of admin access yourself (single admin scenario), proceed to Step 4 below.
- If this is a personal Microsoft account
Go to https://account.live.com/acsr
This is Microsoft’s account recovery form.
You will need:
The email address of the locked account
An alternate contact email
Any details Microsoft can use to verify ownership (recent subject lines, billing info, Xbox ID, etc.)
Microsoft will review and, after verification, remove the old MFA requirement so you can log back in.
Please mark as answer if this was helpful..