A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The required action depends on the account type: use “I don’t have any of these” to replace security information for a personal Microsoft account, or ask the organization’s IT administrator to reset MFA registration for a work or school account.
The two-digit approval and six-digit Authenticator code are tied to the Authenticator registration on the erased phone. Transferring ordinary phone data does not necessarily transfer that registration.
Personal Microsoft account
For an address such as @outlook.com, @hotmail.com, or @live.com:
- On the sign-in screen, select Sign in another way, I can’t use my Microsoft Authenticator app right now, or a similar option.
- If a recovery email, phone, passkey, or recovery code is offered, use it.
- After signing in, open Microsoft account → Security → Manage how I sign in.
- Select Add a new way to sign in or verify and register Authenticator on the new phone.
- Test the new method, then remove the old Authenticator entry. ^1^
If no usable alternative appears:
- At Verify your identity, select I don’t have any of these.
- Follow the prompts to replace your security information. Do not repeatedly request codes, because excessive requests can cause a temporary block. ^2^
- Be aware that changing all security information can restrict the account for 30 days.
If two-step verification was enabled and none of its registered verification methods or recovery codes remains accessible, Microsoft states that support cannot bypass two-step verification or manually send a code. ^3^
Work or school account
For an account issued by an employer or school:
- Select Sign in another way and use another registered method, if one is available.
- If Authenticator is the only method, contact the organization’s IT help desk and request MFA re-registration or a Temporary Access Pass.
- An Authentication Administrator can perform the reset in: Microsoft Entra admin center → Entra ID → Users → your user → Authentication methods → Require re-register MFA. This removes the existing Authenticator and related MFA methods so they can be registered again. ^4^
- At the next sign-in, add Microsoft Authenticator on the new phone and scan the displayed QR code.
Work or school credentials are not restored by Authenticator backup; only the account name is restored, and the account must be registered again. ^5^
If this is the tenant’s only administrator account and no emergency administrator account is available, Microsoft Support is required to verify tenant access.
If Authenticator backup was enabled before erasing the old phone
This applies only if a cloud backup was created and the new phone uses the same device platform:
- Android: Open Authenticator and choose Restore from backup or Begin recovery before signing in, then use the same personal Microsoft recovery account.
- iPhone: Install Authenticator with the same iCloud account and open it to restore supported entries.
- A personal account’s rotating one-time codes may be restored, but passwordless sign-in still requires setup again. Work or school accounts always require re-registration. ^5^
References
- Microsoft account security info & verification codes | Microsoft Support
- Troubleshoot Microsoft verification code issues | Microsoft Support
- Help with the Microsoft account recovery form | Microsoft Support
- Manage user authentication methods for Microsoft Entra multifactor authentication
- Transfer Microsoft Authenticator account entries to a new phone