Hello,
Ideally you need to set up the authentication app on the new phone before you shut down the old phone.
If this is a work or school account,
Microsoft does not directly manage organization users. Instead, each organization's IT administrator is responsible for managing its users according to its internal protocols.
You should contact your organization's IT support team. They need to reset your MFA for you in order for this to work. Once the reset is completed, follow these steps:
- Open your web browser and navigate to https://login.microsoftonline.com.
- Sign in to your account.
- You will be prompted to set up MFA again. Make sure to update your phone number during this process.
If your organization's IT administrator requires guidance, they can follow these steps:
- Sign in to the Microsoft Admin Center at https://admin.microsoft.com using their credentials.
- Navigate to Users > Active Users in the left-hand menu.
- Select the relevant user.
- On the user card that appears on the right, scroll to the bottom and click Manage multifactor authentication.
- On the MFA settings page, locate the user's name, select it, and click Manage user settings on the right.
- In the pop-up box, check the first box and click Save.
This process will reset MFA for the user, allowing them to set it up again.
===========
If it is personal account,
If you’re on the sign-in page and can’t access your authentication app, click “I can’t use my app right now.” Then look for an option like “Show more verification methods” to see if you have a backup (e.g., a phone number or alternate email).
If you don’t have access to any of the options listed, select “I don’t have any of these.” This will begin the recovery process. As part of that process, Microsoft will let you add new contact information — but only after a 30-day waiting period.
This 30-day delay is intentional. It’s a security safeguard designed to protect users in case someone else tries to hijack their account by changing recovery info. The wait gives the rightful owner time to notice and stop unauthorized changes.
Unfortunately, this policy cannot be bypassed. You can read more about it directly from Microsoft here: