How do I reset my AWS account root user MFA device?

Resolution

Note: If you're an AWS Identity and Access Management (IAM) user, then you can't reset your MFA device. Your administrator must deactivate the device. For more information, see Recovering an IAM user MFA device.

To reset your MFA device, you must have access to the account root user email address and phone number that's associated with the account.

Complete the following steps:

1. Sign in to the AWS Management Console with your account root user email address.
2. On the Root user sign in page, enter the password of your root account.
3. On the Amazon Web Services Sign In With Authentication Device page, choose Troubleshoot MFA? Click here.
4. On the Troubleshoot Your Authentication Device page, choose Sign In using alternative factors.
5. For Step 1: Email address verification, validate that the email address is correct, and then choose Send verification email.
6. In the email from AWS with the subject line, AWS Email Verification, choose Verify your email address. The Step 2 page in the verification process appears.
7. For Step 2: Phone number verification, confirm that the phone number is correct, and then choose Call me now.
   Note: If you don't receive the automated telephone call or to update the phone number, see How do I update my telephone number to reset my lost MFA device?
8. Answer the phone call from AWS, and then use your phone's keypad to submit the six-digit verification code that appears on your device's screen.
9. For Step 3: Sign In, choose Sign in to the console. You are automatically redirected to the Security credentials page.
10. Next to the MFA device, choose Deactivate.
11. Next to a new MFA device, choose Activate MFA.
    Note: It's a best practice to activate a new MFA device your as soon as possible.

If you lose your MFA device, then you can assign a virtual MFA device to protect your root account.

For additional assistance, see Lost or unusable multi-factor authentication (MFA) device. Choose I'm still having problems and would like to contact AWS Support. Complete the Request assistance with lost or unusable MFA device form, and then choose Submit.