A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Without a cloud backup from before the phone reset, the missing Authenticator entries and codes cannot be restored; each affected account must be recovered and added to Authenticator again.^1^
Recover each account
- Try signing in to each affected website or service.
- At the verification prompt, select an option such as Try another way, then use an available recovery method:
- Recovery or backup code
- Alternate authentication app or device
- Recovery email
- Phone verification
- After signing in, open that account’s Security, Two-step verification, or MFA settings.
- Remove the old Authenticator registration.
- Add Microsoft Authenticator as a new method, then scan the displayed QR code with: Authenticator → + → account type → Scan a QR code.
- Repeat this process for every missing account.
Third-party services have their own recovery procedures. If no alternate method is available, contact the support team for that specific service.
For a work or school account
Authenticator backups do not restore work or school credentials; even when an account name is restored, the account must be registered again.^1^
If another sign-in method is available, use it to access the organization’s Security info page and add Authenticator again. If completely locked out, contact the organization’s IT administrator and request MFA re-registration.
An Authentication Administrator can perform this in:
- Microsoft Entra admin center → Entra ID → Users
- Select the affected user.
- Select Authentication methods.
- Select Require re-register MFA.
This removes the existing Authenticator and related MFA registrations, after which the user is prompted to configure a new method at the next sign-in.^2^
For a personal Microsoft account
Use any alternate verification method offered during sign-in, then replace the old security method and register Authenticator again.
If two-step verification was enabled and none of the registered alternate methods are accessible, Microsoft Support cannot send a verification code, reset the security information, or bypass two-step verification.^3^
For future phone resets
Enable Authenticator cloud backup after restoring access. Backups can only be restored to the same device platform—for example, iOS to iOS or Android to Android. Personal and eligible third-party one-time codes can be restored, but passwordless and work/school credentials still require additional sign-in or re-registration.^1^
References