Select Language:
If you’ve accidentally removed your virtual multi-factor authentication (MFA) from your authenticator app but still need access to your AWS account, don’t worry. There are ways to regain access and set up a new MFA device.
For root user accounts, during the login process, look for an option labeled “Sign in using alternative factors of authentication.” This will allow you to verify your identity through different methods, such as email verification followed by a phone call from AWS. When you choose this, verify your email address and wait for the call. When prompted, enter the six-digit code displayed on the AWS website into your phone’s keypad. Once you successfully verify your identity, you’ll be able to log into your account. After logging in, go to the AWS Security Credentials page, delete the old MFA device, and then set up a new one.
If you are an IAM user (not the root account), you will need to reach out to your AWS administrator. They can help deactivate your old MFA device and set up a new one for you. Keep in mind this alternative sign-in method is usually only available to root accounts, so IAM users often require admin assistance.
If the alternative authentication options don’t work, double-check that your phone number is correct and able to receive calls. If you’re still unable to access your account, the next step is to contact AWS Support directly through their account recovery form. Be prepared to provide proof of your identity, such as your email address associated with the account and the account ID.
Going forward, to prevent similar issues, consider registering multiple MFA devices. This way, if one device is lost or broken, you can still access your account using an alternative device.
For more help, visit official AWS documentation or support pages.





