Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
You can restore Authenticator only if cloud backup was enabled on the old phone and the new phone uses the same device type; otherwise, regain access through another verification method and register the new phone separately for each account.^1^
1. Restore an existing backup
Backup cannot transfer between iOS and Android.
Android
- Open Authenticator without signing in first.
- Select Restore from backup or Begin recovery.
- Sign in with the personal Microsoft account previously used as the recovery account.
- If that option is missing, sign out of or remove the accounts currently in Authenticator, reopen it, and select the recovery option.
iPhone
- Confirm the new iPhone uses the same Apple/iCloud account as the previous phone.
- Enable iCloud Drive, iCloud Keychain, and iCloud Backup.
- Install and open Authenticator. The backed-up codes and account names should appear.
- For entries showing Sign in to restore your account, select Sign in and complete verification.
A backup restores eligible 30-second codes for personal and third-party accounts. It does not restore passwordless credentials or work/school credentials; those accounts must be registered again.^1^
Because the old phone is unavailable, an iPhone backup that was not already configured cannot now be created using the old-device procedure.^2^
2. If no backup exists, sign in another way and register the new phone
At the Microsoft sign-in prompt, select Sign in another way or I can’t use my Microsoft Authenticator app right now, then use any registered SMS number, email address, security key, passkey, or recovery code.
After signing in:
- Work or school account: Open the account’s Security info page, add Microsoft Authenticator as a sign-in method, and scan the displayed QR code with the new phone. After testing the new registration, remove the old Authenticator entry. Users can manage their own methods through Security info.^3^
- Personal Microsoft account: Open the Microsoft account security settings page, choose Set up identity verification app, and follow the QR-code setup process.^4^
- Third-party account: Sign in to that service’s security or two-factor authentication settings, replace the old authenticator registration, and scan its new QR code.
Repeat this for every account; restoring or registering one account does not reconnect the others.
3. If completely locked out
Personal Microsoft account
If you know the password but have lost all security methods:
- Start signing in.
- At Verify your identity, select I don’t have any of these.
- Follow the process to replace the security information.
Microsoft states that the replacement requires a 30-day wait before sign-in. If two-step verification is enabled and no alternate verification method remains, Microsoft support cannot bypass it or change the account details.^5^^6^
Work or school account
Contact the IT administrator for each organization and request an MFA re-registration. An Authentication Administrator can use:
- Microsoft Entra admin center → Entra ID → Users.
- Select your user → Authentication methods.
- Select Require re-register MFA.
This removes the old registered authentication methods and prompts you to configure Authenticator again at the next sign-in.^3^
About the PIN prompt
If the PIN appears when opening or approving through Authenticator, it is normally App Lock requesting the new phone’s device PIN or biometric—not the PIN from the old phone. App Lock is enabled by default when the device has a PIN or biometric configured.^2^
References
- Restore one-time password codes in Microsoft Authenticator | Microsoft Support
- Microsoft Authenticator FAQs | Microsoft Support
- Manage user authentication methods for Microsoft Entra multifactor authentication
- Why is Microsoft texting me? | Microsoft Support
- Troubleshoot Microsoft verification code issues | Microsoft Support
- Help with the Microsoft account recovery form | Microsoft Support