A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Access to Microsoft Authenticator on a new phone without the old phone depends on what backup or alternative sign-in methods are set up.
- If Authenticator backup was enabled (same device type only)
- Backups can only be restored on the same platform (iOS→iOS or Android→Android).
- On iOS, backup uses iCloud; on Android, backup uses a Microsoft account.
- On the new phone:
- Install Microsoft Authenticator.
- Open the app and choose Restore from backup or Begin recovery (Android) before signing in.
- Sign in with the same personal Microsoft account used for backup.
- Accounts that support backup will be restored. For many accounts, only the account name is restored and sign-in must be completed again.
- If backup is not visible on the new phone (iOS) If using iOS and the backup does not appear:
- On the old device (if it ever becomes usable again):
- Enable iCloud Drive, iCloud Keychain, and iCloud Backup.
- In Saved to iCloud, ensure Authenticator is turned on.
- Update Authenticator to version 6.8.33 or later.
- Open Authenticator at least once.
- On the new device:
- Uninstall and reinstall Authenticator.
- Open it again and the backup should appear for restore.
- What is actually restored When restoring a backup:
- Microsoft personal accounts:
- If using only one-time password (OTP) codes, the codes are available after restore.
- If also using passwordless sign-in, only the account name is restored; sign-in must be completed again.
- Work or school accounts:
- Only the account name is restored; sign-in must be completed again.
- 3rd party accounts (Amazon, Facebook, Gmail, etc.):
- OTP codes are restored.
- If already restored but see “Sign in to restore your account”
- In Authenticator, on the Accounts screen, tap Sign in next to each account.
- Enter the password and complete additional verification (email/phone) as prompted.
- If there is no backup and no alternative method
- For work or school accounts: contact the organization’s IT/admin and ask them to reset MFA or re-register Authenticator for the account.
- For personal Microsoft accounts: sign in at the account security page from a browser and use any available alternative method (SMS, email, etc.) to update security info and re-add Authenticator. If no alternative methods work, follow the account recovery flow from the sign-in page.
Once access to the account is regained via backup or alternative verification, Authenticator on the new phone can be set up again and used for future sign-ins.
References:
- Back up your accounts in Microsoft Authenticator
- Restore account credentials from Microsoft Authenticator
- Microsoft Authenticator FAQs
- Sign in using Microsoft Authenticator
- Use a screen reader to set up and troubleshoot multifactor authentication
- Authenticator locked and cannot access at all after replacing phone - Microsoft Q&A
- Cannot authenticate with E-mail when logging into Microsoft Authenticator(iOS). - Microsoft Q&A
- I have a Micrsoft business account and I am the admin and the only user registered under this account. I can't log in because i have replaced my phone and the authenticator doesn't work. - Microsoft Q&A
- Microsoft authenticator sending me into a spiral - Microsoft Q&A
- Requesting a Tenant Admin MFA Reset - Microsoft Q&A