Microsoft authenticator error 50089

Error 50089 commonly occurs after changing phones when the sign-in session expired or the MFA method on the new device cannot be validated.

Try these steps in order:

1. Start a fresh sign-in session.
   • If signing in through a browser, use a private/incognito window.
   • Turn off VPN if one is enabled.
   • If possible, try a different network.
2. Check the Microsoft Authenticator app on the new iPhone.
   • Make sure the app is updated to the latest version.
   • Make sure notifications are enabled.
   • Make sure the app is unlocked.
   • Verify the iPhone has internet access.
   • Check that Date & time settings are correct.
   • If needed, switch between Wi-Fi and mobile data.
3. If the account was restored to the new phone and shows "Sign in to restore your account" or "Sign in to add your account", open that account in Authenticator and sign in again.
   • For restored accounts, enter the password and complete any additional verification requested.
   • Work or school accounts must be signed in and registered again after restore.
4. If the sign-in page offers it, select "I can’t use my Microsoft Authenticator app right now" or "Sign in another way" and use another registered method such as phone, email, passkey, or security key.
5. If Restore from backup is needed on Authenticator:
   • On Android, it must be selected before signing in. If already signed in, sign out first.
   • If restore is unavailable, confirm backup was enabled on the old phone, the same recovery account is being used, and the restore is being done to the same device type.
6. If authentication still fails with "Authentication did not complete", also verify:
   • Notifications are not silent or disabled.
   • Airplane mode is off.
   • Battery optimization is not interfering with the app.

If this is a work or school account and no alternate sign-in method works, the organization’s IT admin should reset MFA and require re-registration. In Microsoft Entra admin center, the admin can go to Identity > Users > All users > [affected user] > Authentication methods and select Require re-register MFA.

If this is the only global admin account in the tenant and access is completely blocked, Microsoft Support is required for tenant recovery.

If this is a personal Microsoft account, after trying the steps above, send logs from Authenticator using top-level menu > Send feedback and then contact Support.