Lost your phone
Use one of the recovery codes you saved when the account was created. You will set up a new authenticator app and be signed in.

Any of the codes issued when your account was created. Case and spacing do not matter. The code is used up either way, so use one you have not used before.

Using a code signs out every session on the account straight away — including anyone holding your phone.

Back to sign in

No recovery codes either? An administrator can send a re-enrolment link. It goes to the account’s own email address, not to them — so they cannot hand your access to anyone, including someone claiming to be you.