A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Register the account on the new Android phone, test that it receives approvals or generates valid codes, and only then unregister the old phone.
Installing Authenticator alone does not move the device registration. Adding a new device also does not automatically remove the old one, and merely uninstalling Authenticator from the old phone is insufficient.^1^
If this is a work or school account
- Keep the old phone available temporarily.
- Open Security info at https://aka.ms/mysecurityinfo and sign in. Approve the request on the old phone if prompted.
- Select Add sign-in method → Authenticator app → Add.
- On the new phone, open Microsoft Authenticator and select: Add account → Work or school account → Scan QR code.
- Scan the QR code displayed on the Security info page and complete the test approval.
- Sign out and perform a fresh sign-in to verify that the request reaches the new phone.
- After the new phone works, return to Security info and remove the Authenticator entry or device associated with the old phone.
These are the documented registration steps for work or school accounts.^2^ If the account was restored from backup, seeing “Sign in to add your account” is expected: only the account name is restored for work or school accounts, so it must be signed in and configured again.^3^
If the organization uses passkeys, create and test a passkey on the new phone before removing the old passkey or device.^3^
If this is a personal Microsoft account
- Open the Microsoft account Account Security page from the Authenticator FAQ.
- Go to the two-step verification area.
- Register Authenticator on the new phone and sign in to complete its setup.
- Test a new sign-in on the new phone.
- Turn off verification for or remove the old device only after the test succeeds.
For a personal account using passwordless sign-in, restoring a backup restores only the account name; signing in again is required to finish setup. A basic 30-second verification-code entry can be restored from backup.^3^
If you cannot access the security page
- Select Sign in another way and use an available backup method such as SMS.
- For a work or school account with no usable alternative, contact the organization’s IT administrator or help desk and request an MFA registration reset or an approved recovery method. If supported by the organization, an administrator can provide a Temporary Access Pass for registration on the new phone.^2^
- Do not erase, trade in, or reset the old phone until sign-in has been tested successfully on the new one.^3^
References