A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
If the old phone is no longer usable, recovery depends on whether backup was enabled before the phone failed.
- On the new phone, install Microsoft Authenticator.
- Try restore/recovery in the app using the same recovery account that was used for backup.
- On Android, backup must have been turned on as Cloud Backup in Authenticator and stored in a Microsoft personal account.
- On iPhone, backup requires iCloud Drive, iCloud Keychain, iCloud Backup, and the Authenticator toggle enabled under Saved to iCloud.
- If restore works, expect this behavior:
- Work or school accounts: only the account name is restored. Open each account and sign in again to complete setup. Seeing “Sign in to add your account.” is expected.
- Personal Microsoft accounts: one-time password entries are restored, but passwordless accounts still require sign-in again.
- Third-party accounts: one-time password entries are typically restored.
- If restore is not available:
- Verify backup had been enabled on the old phone.
- Verify the same recovery account is being used.
- Verify restore is being done to the same device type.
- If the new phone is an iPhone and the backup still does not appear:
- On the old device, the app must have been opened at least once before switching phones.
- Authenticator must be version 6.8.33 or later.
- On the new device, uninstall and reinstall Authenticator, then check again for the backup.
For the work account, if the account does not complete setup after restore, open the restored account entry and sign in again. If the organization enforces passkeys, set up a new passkey for the new phone before removing the old device. If self-service passkey setup is blocked, contact the IT admin or help desk.
If no backup exists, the accounts cannot be populated automatically. In that case, re-register the new phone for the work account from the Security info page by adding Microsoft Authenticator again, or ask the IT admin to reset MFA registration if sign-in is blocked. For work scenarios, do not erase or remove the old phone until sign-in on the new phone is confirmed.
- Transfer Microsoft Authenticator account entries to a new phone
- Transfer Microsoft Authenticator account entries to a new phone
- Transfer Microsoft Authenticator account entries to a new phone
- Microsoft Authenticator FAQs
- Migrate to a new iPhone for work
- How do I make my authenticator app work on my new device? - Microsoft Q&A
- How to change Microsoft Authenticator from old phone to new phone? - Microsoft Q&A