A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Deleted Authenticator entries themselves cannot be recovered. Recovery is only possible from a previously created cloud backup, and only under specific conditions.
Key points from how Authenticator backup/restore works:
- Backup must have been enabled before deletion
- On iOS, Authenticator backs up to iCloud; on Android, to a Microsoft account cloud backup.
- If backup was not turned on before the apps/accounts were deleted, there is no way to retrieve those deleted Authenticator entries.
- Backup/restore is per device type
- Accounts backed up on iOS cannot be restored on Android, and vice versa.
- What actually gets restored
- Microsoft personal accounts
- If they used only a 30‑second one-time password (OTP), the OTP configuration is restored and works immediately.
- If they also used passwordless sign‑in, only the account name is restored; sign-in must be completed again to re‑enable passwordless.
- Work or school accounts
- Only the account name is restored; sign-in is required again.
- 3rd‑party accounts (e.g., Norton, Amazon, Facebook, Gmail)
- The OTP configuration is restored if it was present in the backup.
- Microsoft personal accounts
- How to attempt restore on the new phone
- Android:
- Open Authenticator.
- Before signing in to any account, select Restore from backup (or Begin recovery).
- Sign in with the same personal Microsoft account that was used for backup.
- If Restore from backup is not visible, all existing accounts in the app may need to be removed or signed out first to expose the restore option.
- Android:
- If restore does not show the old entries
- If the Norton (or other app) entries do not appear after a successful restore, then they were not present in the backup at the time it was taken, or no backup existed.
- In that case, the only option is to reconfigure MFA/OTP directly with each service (e.g., Norton 360 account portal) as if setting it up for the first time.
- If unable to restore because the backup account itself is inaccessible
- If the cloud backup account cannot be accessed, Authenticator credentials cannot be restored. The only path is to:
- Recover access to the Microsoft backup account using the Microsoft account sign‑in helper.
- Or re-add each account manually following the provider’s recovery process.
- If the cloud backup account cannot be accessed, Authenticator credentials cannot be restored. The only path is to:
There is no separate “previous versions” or “deleted items” history for Authenticator entries beyond the single cloud backup. If the entries were deleted and were not in a valid backup that can be restored, they cannot be retrieved and must be re-added with each service.
References: