A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
When moving to a new phone, Microsoft Authenticator does not automatically restore all accounts and codes unless backup/transfer was previously configured. Recovery options depend on what type of accounts were in the app and what backup methods are still available.
Use these steps and options:
- Try alternative verification methods
- For personal Microsoft accounts: if SMS, email, or another method is configured, choose “Use a different verification method” (or similar) on the sign-in screen and use that instead of the Authenticator code.
- For work/school accounts: if another method (SMS, phone call, backup email, FIDO key, etc.) is configured, select it when prompted for verification.
- If Microsoft push notifications are not arriving If trying to register or sign in and expecting a push notification from Microsoft Authenticator but nothing appears:
- The notification may be going to an old device where Authenticator was last used.
- If that device is still available, open Authenticator there and approve the sign-in.
- If the old device is not available:
- Use a different verification method (SMS, etc.) if offered.
- After regaining access, remove old devices from the account’s security settings so notifications no longer go to them.
Details:
- During sign-in, push notifications are sent to the device where Authenticator was last active. If that device is gone, it can look like the process failed.
- To avoid this in future, always remove Authenticator from old devices and keep device list up to date in account security settings.
- If there is no other verification method
- Personal Microsoft account:
- Follow the guidance in Troubleshoot Microsoft verification code issues to recover access using the account recovery form or by replacing security info if all methods are lost.
- Work/school account:
- Contact the organization’s IT/admin and ask them to reset MFA / authentication methods for the account in Microsoft Entra Admin Center so Authenticator can be set up again on the new phone.
- If the account is the only global admin on a tenant and no other method works, the tenant admin must work with Microsoft support/Data Protection team (via phone support) to regain access, as shown in the referenced Q&A threads.
- After access is restored
- Re-register Microsoft Authenticator for each account.
- Add at least one backup method (SMS, phone call, alternate email, security key) so a lost phone does not lock out the account again.
- Optionally enable cloud backup/account transfer in Authenticator (for supported account types) before changing phones in the future.
If none of the above methods are available for a specific account (no SMS/email/backup, no admin who can reset MFA, and no access to the old phone), that account’s codes cannot be recovered from the new device and must be reset by the account provider or admin.
References:
- Troubleshoot Microsoft verification code issues
- Common problems with two-step verification for a work or school account
- Microsoft Authenticator FAQs
- Having problems getting text codes to confirm my account - Microsoft Q&A
- How Do I Regain Access to My Account After Losing Access to Microsoft Authenticator? (Urgent Request). - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A