How to transfer Microsoft Authenticator to a new device

Moving Microsoft Authenticator to a new phone means backing up your accounts before you switch devices, then restoring them on the new phone. The process takes about 10 minutes and prevents you from getting locked out of your Microsoft account, work email, or any other service that uses the app for two-factor authentication.

The exact steps depend on whether you use an iPhone or Android phone, and whether your old phone still works. If your old phone is broken or lost, you can still regain access through your Microsoft account recovery options — but backing up beforehand is far simpler.

Key Takeaways

  • Back up your accounts in Microsoft Authenticator before switching phones by opening Settings, selecting Backup, and choosing your backup method (iCloud for iPhone, Microsoft account for Android).
  • On your new phone, download Microsoft Authenticator, sign in with your Microsoft account, and restore your backed-up accounts from the Backup section.
  • If your old phone is lost or broken, you can still recover access by using your Microsoft account recovery options or contacting your organization's IT support.
  • Two-factor authentication codes expire quickly, so restore your accounts before your old phone's battery dies or loses service.

Back up your accounts before you switch

Open Microsoft Authenticator on your current phone and tap the three-line menu icon (hamburger menu) at the bottom right. Select Settings, then look for Backup or Cloud backup. The app will ask you to choose a backup destination.

On iPhone, you back up to iCloud. You'll need to sign in with your Apple ID and allow the app permission to use iCloud. On Android, you back up to your Microsoft account — the same account you use to sign in to Windows or Outlook. Either way, the app encrypts your account data before sending it, so Microsoft cannot see your authentication codes.

After you choose your backup method, the app will show you a list of all accounts currently in Authenticator. Review the list to make sure every account you need is there. If you're missing any, add them now by tapping the plus icon and scanning a QR code or entering a setup key manually.

Download and restore on your new phone

On your new phone, go to the App Store (iPhone) or Google Play (Android) and search for "Microsoft Authenticator." Download the official app published by Microsoft Corporation. Open it and sign in with the same Microsoft account you used for backup on your old phone.

Once you're signed in, tap the menu icon and go to Settings, then Backup. The app will show you a list of backed-up accounts. Tap Restore or Recover (the wording varies by phone type). The app will download your accounts and add them to your new phone within seconds.

After restoration completes, open the main screen of Authenticator and verify that all your accounts appear. Tap each one to confirm it's generating six-digit codes. If any account is missing, you can add it manually by tapping the plus icon and entering the setup key or scanning a QR code.

What to do if your old phone is lost or broken

If you cannot access your old phone, you can still regain access to your accounts through your Microsoft account recovery page. Go to account.microsoft.com on any web browser, sign in, and look for Security or Account recovery. Microsoft will ask you to verify your identity using a recovery email address or phone number you set up previously.

Once verified, you can remove Authenticator as a sign-in method and add it back on your new phone. This process takes longer than a backup restore — usually 24 to 48 hours — because Microsoft needs to confirm you're the account owner. If you use Authenticator for work email or a work account, contact your organization's IT support desk instead; they can remove the old device from your account immediately.

To prevent this situation in the future, set up a recovery email and recovery phone number on your Microsoft account now. These are separate from your main email and phone, and they're your lifeline if you lose access to your primary device.

Removing Authenticator from your old phone

Once you've confirmed that all your accounts are working on your new phone, you can delete Microsoft Authenticator from your old phone. This step is optional but recommended — it prevents someone who finds your old phone from using it to access your accounts.

On iPhone, press and hold the Authenticator app icon on your home screen, tap Remove App, then tap Delete App. On Android, open Settings, go to Apps, find Microsoft Authenticator, and tap Uninstall. The app will ask for confirmation; tap OK.

If you're selling or recycling your old phone, also sign out of your Microsoft account in the phone's main settings before you hand it over. On iPhone, go to Settings > [Your Name] > Sign Out. On Android, go to Settings > Accounts > Microsoft and tap Remove account.

Troubleshooting a failed restore

If your accounts don't appear after you tap Restore, first check that you're signed in with the same Microsoft account you used for backup. Open Settings on your new phone and verify which account is connected to Authenticator. If it's wrong, sign out and sign in again with the correct account.

If you're still not seeing your accounts, try restarting your new phone and opening Authenticator again. Sometimes the app needs a moment to sync with the cloud. If that doesn't work, go back to Settings > Backup and tap Restore a second time.

If restoration still fails and you have your old phone, you can add accounts manually. Open Authenticator on your old phone, tap each account, and look for a View setup key or Can't scan? option. Write down the setup key, then on your new phone, tap the plus icon in Authenticator, select Enter setup key, and paste the key. Repeat for each account.

Keeping your backup current

Microsoft Authenticator backs up automatically once you turn on backup in Settings. However, if you add new accounts to Authenticator after your initial backup, they won't be included in the old backup file. Before you switch phones again in the future, open Settings and check that your most recent backup includes all your current accounts.

You can also manually trigger a backup at any time by opening Settings > Backup and tapping the backup option again. This is useful if you've added accounts recently or if you want to make sure your backup is fresh before traveling or upgrading your phone.

Frequently Asked Questions

Can I use Authenticator on two phones at the same time?

Yes. You can install Authenticator on multiple phones and restore the same backed-up accounts to each one. This is useful if you carry both a work phone and a personal phone. Each phone will generate the same codes for the same accounts, so you can use whichever phone is handy when you need to sign in.

What if I don't have my old phone and I didn't back up?

Go to account.microsoft.com and use your recovery email or phone number to regain access to your Microsoft account. Once you're in, remove Authenticator as a sign-in method. Then download Authenticator on your new phone and add your accounts manually using the setup keys from each service (Gmail, Outlook, work email, etc.). Your IT department or the service's support team can provide setup keys if you don't have them.

Does backing up to iCloud or Microsoft account expose my codes?

No. Authenticator encrypts your account data before it leaves your phone, so neither Apple nor Microsoft can read your authentication codes. The backup contains only the information needed to regenerate your codes on a new phone — not the codes themselves.

How long does a restore take?

A restore from backup usually completes in seconds to a few minutes, depending on how many accounts you have and your internet speed. If you're recovering through your Microsoft account (because your old phone is lost), the process takes 24 to 48 hours because Microsoft verifies your identity first.

Will I be locked out of my accounts during the transfer?

No. Your accounts remain accessible through other sign-in methods (your password, a recovery code, or a recovery email) while you're setting up Authenticator on your new phone. You only need Authenticator to be working if your account requires two-factor authentication and you don't have another method available.