A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Without the old phone, the original one-time codes stored in Microsoft Authenticator cannot be recovered directly from the app. The only supported options are to restore from a backup or reconfigure the accounts that used those codes.
Use these steps depending on the situation:
- Try restoring Authenticator from backup (same platform only)
- Backup and restore only work between the same device type (iOS→iOS or Android→Android).
- On a new phone: install Microsoft Authenticator and use Restore from backup / Begin recovery (Android) or iCloud-based restore (iOS) with the same backup account that was used before.
- After restore, for many accounts only the account name is restored; each account may still require signing in again to fully re-enable codes.
- If restore is not possible (no backup, different platform, or backup account not accessible)
- The original TOTP codes cannot be retrieved.
- Each service (including the one used on PS5) must be recovered individually using its own account recovery or security options (for example, SMS, email, backup codes, or support for that service).
- Once access to the service account is regained, add it again to Microsoft Authenticator as a new account.
- If unable to restore because the backup account itself is inaccessible
- For Microsoft accounts, use the Microsoft account sign-in helper to regain access to the backup account, then try restore again.
- If the backup account cannot be recovered, Authenticator credentials must be re-added manually to each service.
- If Authenticator shows accounts with “Sign in to restore your account” or “Action required”
- Open Authenticator, tap the affected account, and complete sign-in with password plus email/phone verification to re-activate it.
There is no way to get the old codes from the missing phone itself if it is unavailable and not backed up; recovery must go through the backup mechanism or through each service’s own account recovery.
References: