How to transfer your authenticator to a new phone
The safest way to move your authenticator app depends on which app you use and whether you set up backup codes when you first enabled two-factor authentication. Most authenticator apps — Google Authenticator, Microsoft Authenticator, Authy — do not automatically back up your codes, so you cannot simply reinstall them on a new phone and expect your accounts to work. You need either backup codes you saved earlier, a recovery key from the service you're protecting, or a feature like Authy's cloud backup that you enabled beforehand.
If you do not have any of those, you will need to turn off two-factor authentication on each account using your old phone, then set it up fresh on your new one. This takes longer but works even if you have no backup material.
Key Takeaways
- Most authenticator apps do not back up automatically, so you need backup codes or a recovery key saved before switching phones.
- Authy and Microsoft Authenticator can sync across devices if you enabled that feature; Google Authenticator cannot.
- If you have no backup codes, you can disable two-factor authentication on your old phone and set it up again on your new one.
- Save backup codes and recovery keys in a secure place the moment you enable two-factor authentication on any account.
Using backup codes you saved when you set up two-factor authentication
When you first turned on two-factor authentication for an account — Gmail, Facebook, your bank — the service usually showed you a set of backup codes and asked you to save them. These are one-time passwords that work in place of your authenticator app if you lose access to it.
Find those codes (they are usually in a text file, email, or password manager where you stored them). Go to the account's security settings on any device with internet access — you do not need your phone. Look for the option to disable or reset two-factor authentication, and use one of your backup codes to verify your identity. Once two-factor authentication is off, install your authenticator app on your new phone and set up two-factor authentication again from scratch. The service will show you a new set of backup codes; save those in the same secure place.
Using Authy or Microsoft Authenticator with cloud sync enabled
Authy and Microsoft Authenticator both offer cloud backup, but only if you turned it on when you first set up the app. If you did, your codes are stored in the cloud and will appear automatically when you sign into the app on your new phone.
Install Authy or Microsoft Authenticator on your new phone. Sign in with the same account you used on your old phone. Your two-factor codes will download and appear in the app within a few seconds. You can then uninstall the app from your old phone.
If you never turned on cloud backup, these apps will not have your codes stored anywhere. You will need to use backup codes or the recovery key method instead.
Using a recovery key from the service itself
Some services — particularly Google, Microsoft, and Apple — give you a recovery key when you set up two-factor authentication. This is a long string of characters that lets you regain access to your account if you lose your authenticator app.
If you saved your recovery key, sign into your account on any device with a web browser. Go to your security settings and look for an option like "Recover your account" or "Lost access to your authenticator." Enter your recovery key to verify your identity. Once verified, you can turn off two-factor authentication, install the authenticator app on your new phone, and set it up again.
Disabling two-factor authentication on your old phone if you have no backup codes
If you have no backup codes, no recovery key, and no cloud sync, you can still move your authenticator by disabling two-factor authentication on your old phone first. This is the slowest route but it works.
On your old phone, open the authenticator app and look at which accounts are protected. Go to each account's website or app on your old phone and navigate to security settings. Look for an option to disable or turn off two-factor authentication. The app will ask you to confirm by entering a code from your authenticator — use the code shown in the app on your old phone to complete the process.
Once two-factor authentication is off for all your accounts, install the authenticator app on your new phone. Go back to each account's security settings and turn two-factor authentication back on. The service will show you a new code to scan with your new phone's camera. Scan it into the authenticator app on your new phone. When you are done with all accounts, you can uninstall the app from your old phone.
What to do if you cannot access your old phone
If your old phone is lost, broken, or stolen, you cannot use it to disable two-factor authentication. In this case, contact the support team for each account you need to access. Explain that you lost access to your authenticator and ask them to help you regain control of your account.
Most services will ask you to verify your identity using a backup email address, a phone number on file, or answers to security questions. Once you verify, they can turn off two-factor authentication temporarily so you can sign in on your new phone. After you sign in, set up two-factor authentication again with your new phone's authenticator app.
This process can take anywhere from a few minutes to several days depending on the service and how quickly they respond. Start with the accounts that matter most — email, banking, password manager — because those are the ones that lock you out of everything else.
How to avoid this problem in the future
The moment you enable two-factor authentication on any account, save the backup codes in a secure place. Write them down in a notebook, store them in your password manager, or save them in an encrypted file on your computer. Do the same with any recovery key the service offers.
If your authenticator app offers cloud backup or sync — Authy and Microsoft Authenticator do — turn it on immediately. This is not a replacement for backup codes, but it makes switching phones much easier.
Before you switch phones, test your backup codes on at least one account to make sure they actually work. Some people save codes but never verify they are correct, and then discover the problem when they need them.
Frequently Asked Questions
Can I just take a screenshot of my authenticator codes and use that on my new phone?
No. A screenshot is just a picture of the numbers; it does not contain the secret key that generates new codes every 30 seconds. You need either the original setup code (a QR code or text string), a backup code from when you set up two-factor authentication, or a recovery key from the service.
What if I lose my phone before I can transfer my authenticator?
Contact the support team for each account and explain that you lost access to your authenticator. They will verify your identity using backup email, phone number, or security questions, then disable two-factor authentication so you can sign in on a new device. This takes longer than using backup codes but works even if you have no backup material saved.
Does Google Authenticator back up to the cloud?
Google Authenticator added cloud backup in 2021, but only if you signed into a Google account in the app and enabled it. If you did, your codes will sync when you install the app on your new phone. If you never turned it on, your codes are only on your old phone and you will need backup codes or a recovery key to access your accounts.
Can I use the same authenticator app for multiple accounts?
Yes. Most people use one authenticator app for all their two-factor accounts. When you set up two-factor authentication on a new account, the app will add it to your list. When you switch phones, all of those accounts move together if you use cloud sync or backup codes.
What is the difference between a backup code and a recovery key?
A backup code is a one-time password that works in place of your authenticator app. A recovery key is a longer string that lets you regain access to your account and reset two-factor authentication. Both serve as insurance, but they work differently. Save both if the service offers them.