How do I remove a lost or broken MFA device from my AWS account?

Last updated: 2020-08-28

I'm using a multi-factor authentication (MFA) device, but now I can't find the device, the device is broken, or the device is out-of-sync. How do I remove it?

Resolution

If the lost, broken, or out-of-sync MFA device is preventing you from signing in to the account, see What If an MFA device is lost or stops working?

If you're still unable to gain access to the account, you can request assistance from AWS Support by filling out the Lost or unusable Multi-Factor Authentication (MFA) device form.

If you can sign in to the account, and you want to remove an MFA device from an AWS account root user or deactivate an MFA device for an AWS Identity and Access Management (IAM) user, see Deactivating MFA devices.