A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because the original device was removed before moving Authenticator, the existing two-step verification setup is now pointing to a device that no longer has the app. Resolution depends on whether this is a personal Microsoft account or a work/school account and whether another verification method is available.
Use these approaches:
- Try an alternate verification method
- On the sign-in screen, choose a different method such as SMS or email if it is offered (for example, “Use a different verification option”).
- If SMS or email verification works and you can sign in, immediately update your security info:
- For a personal Microsoft account, go to the two-step verification area of your Account Security page and:
- Remove the old Authenticator registration.
- Add the new device by setting up Microsoft Authenticator again.
- For a work or school account, go to the two-step verification area of your My Apps page or your organization’s company portal and remove the old device, then re-register Authenticator on the new device.
- For a personal Microsoft account, go to the two-step verification area of your Account Security page and:
- If push notifications are going to the old device
- When trying to sign in, the push notification may still be sent to the device where Authenticator was last used.
- If the old device is still physically available, reinstall Authenticator, sign in if possible, and approve the pending request there.
- Once signed in, remove the old device from your security info as above, then add the new device.
- If no alternative method works and this is a work/school account
- Contact the organization’s IT administrator and ask them to reset your MFA:
- In the Microsoft Entra admin center, they can go to your user → Authentication methods → “Require re-register multifactor authentication.”
- After reset, sign in again and register Authenticator on the new device.
- If you are the only administrator for a business tenant and are locked out, a support request with Microsoft’s Data Protection team is required (via Microsoft support phone channels) to verify identity and reset MFA, as described in the referenced Q&A threads.
- If no alternative method works and this is a personal account
- If SMS or email verification fails or is unavailable and you cannot sign in anywhere, use the account recovery and support paths described in the personal-account documentation linked from the FAQs (for example, troubleshooting verification code issues) to regain access, then remove the old Authenticator registration and add the new device.
Once access is restored, always:
- Remove Authenticator from old devices in both the app and the account’s security settings.
- Add at least one backup method (SMS, email, or another app) so a future device change does not cause lockout.
References:
- Microsoft Authenticator FAQs
- How to add your accounts to Microsoft Authenticator
- Troubleshoot problems with Microsoft Authenticator
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Reset Personal Azure MFA - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A