A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
To regain access and update the phone number so the account can be added to Microsoft Authenticator on a new phone, the recovery path depends on what security info is still accessible.
- If the password is known and at least one security method still works (old phone number or email)
- Sign in to the Advanced security options page for the Microsoft account: Sign in.
- Under Security info, select Add a new way to sign in or verify.
- Choose a new phone number or email and complete verification (a code will be sent to the new method).
- After the new method is confirmed, expand the old phone number entry and select Remove, then confirm.
- Once the new phone number is added, set up Microsoft Authenticator on the new phone using that account.
- If the password is known but there is no access to any existing security info (old phone number, old email, or old Authenticator)
- Start signing in to the Microsoft account: Sign in.
- At the Verify your identity prompt, select I don't have any of these.
- Follow the prompts to replace the security info (add a new phone/email).
- After submitting, there will be a 30‑day waiting period before normal sign-in is allowed with the new security info.
- After the 30 days, sign in and then add the account to Microsoft Authenticator on the new phone.
- If the password is not known and there is no access to any security info
- Use the Microsoft account recovery form as described in Help with the Microsoft account recovery form.
- Submit the recovery request with as much accurate information as possible.
- Wait for the result of the recovery request; if successful, sign in and then follow path 1 or 2 above to update phone number and reconfigure Authenticator.
If verification codes are not arriving or there are issues with the phone number format, use the guidance in the verification-code troubleshooting article and, when prompted during sign-in, choose I don't have any of these to start the security-info replacement process.
References: