How to set up MFA backup methods so you don't get locked out
Losing a primary mobile device often locks people out of their accounts because they have no configured backup authentication method or bypass option. Without a pre-established alternative, individuals are forced to file tedious IT support tickets just to re-establish access on a new device.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
Found another way around this?
Share your steps and trade-offs so fellow engineers don't have to reinvent the wheel. No account required.
- 1Contacting an administrator to reset the account or enable a temporary bypassDid this help you?
- 2Using a physical hardware token like a Yubikey or enrolling a secondary deviceDid this help you?
- 3backing up authenticator apps manually using separate personal accountsDid this help you?
- 4resetting accounts and re-registering all MFA tokens through IT support ticketsDid this help you?
- 5Printing hard copies of accommodation bookings, train tickets, and essential phone numbersDid this help you?
- 6Carrying a backup device like a secondary phone, tablet, or laptopDid this help you?
- 7Cloning an iPhone to a second device left at homeDid this help you?
- 8Using a trusted friend with access to home computers or emergency contact detailsDid this help you?
- 9Saving screenshots of tickets and confirmations to alternative photo storageDid this help you?
- 10Relying on cached workstation loginsDid this help you?
- 11Setting up independent break-glass local admin accountsDid this help you?
In their words
Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.
“i just froze there. just kept looking at canale. thinking if i should jump or not.”source ↗
“booking was asking for phone number or mail verification. my gmail, outlook were asking for phone number or other email verification or sending a notification to my phone mail apps. f......k. i didnt know any phone number to call for help.”source ↗
“basically i bought a new phone but i couldnt use it.”source ↗
“literally there was no way to get in my mails or socials without verifications.”source ↗
“i had to sign up for fake gmail, then fake instagram, then added my friend to tell her to go to my home and use my pc to do some verifications. it took hours for me to function.”source ↗
“i just learned this lesson the hard way as well, and lost my phone immediately after landing in Munich... Apps requiring 2FA is great until you lose the ability to receive the codes you need.”source ↗
“i couldnt access to my google accounts. it asked verification and i couldnt verify my id.”source ↗
“How would you manage a situation where workstation logins don't work and you can't reference the LAPS password in Intune?”source ↗
“this is one of those scenarios where I'd want tested break-glass local admin account that doesn't depend on Entra or Intune being reachablee.”source ↗
“I am trying to setup Duo Security on my PC at the office so that in the event I lose my phone or my phone is smashed what do I need to enable in the installation process to allow me to bypass the MFA/Passkey push?”source ↗
“this. it’s a massive pain in the ass to go around filing support tickets everywhere in order to re establish MFA on new device MS authenticators.”source ↗
Where this came up
People with this problem also raised
- 5Fixing security token enrollment errors for non-technical users
- 2Why is step-up authentication forced and buggy?
- 2Can multiple Windows users open a KeePass database?
- 3How do you manage accounts and passwords that don't use SSO?
- 2How to migrate away from 1Password safely
- 2Why does accounting software force logins for every company file?