Microsoft Authenticator Backup

Question

I hope I'm in the right place to ask, kinda desparate right now... sigh!

After installing this app (after restore factory settings my phone), I accidentally choose "Add Account", should be "Sign to recover". After successfully log in, I enabled "Cloud Backup" but this 🤬 function overwrite my old backup with new login backup! I already send ticket (got ticker number) but still, no response from Microsoft. How can anyone help or guide me on this? Please, really appreciate it! 🙏

Answer 1

Once Cloud Backup has overwritten the previous Microsoft Authenticator backup, the older backup cannot be restored because Authenticator maintains a single backup point rather than multiple restore versions.^1^

Do not turn off Cloud Backup now: that action deletes the current backup; it does not reveal or recover the earlier one.^2^

Recover access account by account

Personal Microsoft accounts

1. Try another configured verification method, such as a recovery email, phone number, recovery code, or trusted device.
2. After signing in, remove the obsolete Authenticator registration and add Authenticator again.
3. If the restored entry displays Sign in to restore your account or Action required, select it and complete the requested password and identity verification.

Authenticator can restore eligible 30-second one-time-password codes, but passwordless credentials must be set up again.^3^

Work or school accounts

Work or school credentials are not included in an Authenticator backup—only the account name is restored. Each account must be signed in and registered again.^3^

If another authentication method still works, use the organization’s Security info page to register the new Authenticator installation. Otherwise, contact the organization’s IT administrator and ask for an MFA re-registration reset. An Authentication Administrator can do this at:

1. Microsoft Entra admin center
2. Entra ID → Users
3. Select the user → Authentication methods
4. Select Require re-register MFA

That operation removes the existing Authenticator and related MFA methods, so it should be performed only after confirming an administrator can help complete the new registration.^4^

Third-party accounts

For Google, Facebook, banking, developer, and other third-party accounts:

1. Use each service’s backup/recovery codes or another configured sign-in method.
2. Open that service’s security or two-factor authentication settings.
3. Remove the old Authenticator registration.
4. Add Authenticator again by scanning the newly generated QR code.

If no alternative method is available, contact that service’s support team and request its account-recovery or 2FA-reset procedure. Microsoft cannot regenerate another provider’s TOTP secret.^5^

What the existing support ticket can—and cannot—do

Keep the ticket number for any response from Microsoft, but there is no documented server-side procedure for rolling Authenticator back to an earlier backup after it has been overwritten. The practical recovery path is therefore to regain access to each affected account and register it again.

After recovery, save each service’s emergency recovery codes somewhere separate from the phone. This provides a recovery route if the device or Authenticator backup becomes unavailable again.

---

References

1. I accidentally clicked fresh login and lost my backup. I need to know whether I can retrieve my old backup ? - Microsoft Q&A
2. Back up account credentials in Microsoft Authenticator
3. [iOS](https://support.microsoft.com/authenticator/restore-account-credentials-from-microsoft-authenticator#unable-to-restore-authenticator-account-credentials)
4. Manage user authentication methods for Microsoft Entra multifactor authentication
5. Lost access to all my TOTPs in authenticator app - Microsoft Q&A