How to move Authenticator to my new phone

Use Sign in another way to authenticate with a backup method and register the new phone; if no alternative method is available, your organization’s IT administrator must require MFA re-registration.

If another sign-in method is available

1. On the Microsoft sign-in screen, select Sign in another way or I can’t use my Microsoft Authenticator app right now.
2. Choose an available method, such as a text message, phone call, security key, passkey, or another registered method.
3. After signing in, open Security info.
4. Select Add sign-in method → Microsoft Authenticator.
5. Install and open Authenticator on the new phone, then follow the displayed instructions to scan the QR code and complete a test notification.
6. After confirming that the new phone works, return to Security info and remove the Authenticator entry associated with the old phone. Users can manage their own methods through Security Info.^1^

If you cannot pass verification

Contact your company’s IT help desk and ask them to:

Require me to re-register for multifactor authentication because I no longer have my old phone.

An Authentication Administrator can perform this in:

1. Microsoft Entra admin center → Entra ID → Users.
2. Select your user account.
3. Select Authentication methods.
4. Select Require re-register MFA and confirm.

This operation removes your registered Authenticator apps, phone numbers, software OATH tokens, and deactivates hardware OATH tokens. At your next sign-in, you will be prompted to configure an authentication method again.^1^

Install Authenticator on the new phone before completing that prompt, then scan the new QR code when requested.

Authenticator backup limitation

Restoring an Authenticator backup does not restore credentials for a work or school account; it restores only the account name. The work account must still be signed in and registered on the new device.^2^

If the account appears in Authenticator with Action required, open it and select the option to sign in or recover. If that process asks for approval from the unavailable phone and offers no alternate method, the administrator reset above is required.

If you are the organization’s only administrator

If no other administrator can reset your MFA and you are completely locked out, contact Microsoft Support for tenant-access recovery and ownership verification.^3^

References

1. Manage user authentication methods for Microsoft Entra multifactor authentication
2. [Android](https://support.microsoft.com/authenticator/restore-account-credentials-from-microsoft-authenticator#what-information-is-restored-in-authenticator)
3. Unable to log into Authenticator app - Microsoft Q&A