Transfer Microsoft Authenticator account entries to a new phone

Microsoft Authenticator helps make sign-in more secure and convenient by supporting multifactor authentication and verification codes. When you get a new phone, you can recover supported account entries and continue using secure sign-in methods by backing up and restoring these methods. Work or school accounts require additional sign-in and setup steps after restore. Complete the transfer before you erase, trade in, or recycle your old phone.

For work or school accounts, backup and restore transfers the account name so you can recognize the account on the new phone. You still need to sign in again to complete setup.

Important

Keep your old phone until you confirm that you can sign in to the accounts and resources you use most often from the new phone.

Use the following steps to back up Microsoft Authenticator on your old phone, restore it on your new phone.

Back up Microsoft Authenticator on iOS

To back up Authenticator on an iOS device, enable iCloud Drive, Keychain, and Backup for Authenticator.

  1. Enable iCloud Drive on your iOS device.
  2. Enable iCloud Keychain on your iOS device.
  3. Enable iCloud Backup on your iOS device.
  4. Go to Apple Account > iCloud > Saved to iCloud and search for Authenticator.
  5. Turn on the Authenticator toggle.

Back up Microsoft Authenticator on Android

To back up your Authenticator account entries on an Android device:

  1. Open Microsoft Authenticator.
  2. Open the menu and select Settings.
  3. Turn on Cloud Backup.
  4. Select a Microsoft personal account where the backup will be stored.
  5. Tap OK.

Note

If you saved the backup to the wrong account, or need to change the recovery account, delete the existing backup and create a new backup.

Expected behavior after restore

Work or school accounts

  • Only the account name is restored.

  • To complete setup on the new phone, open the account and sign in again.

  • You might see red text that says "Sign in to add your account."

    Screenshot of a restored work account in Microsoft Authenticator showing the Sign in to add your account message.

Personal Microsoft accounts

  • If the account uses only a one-time password code that refreshes every 30 seconds, the verification code entry is restored.
  • If the account also uses passwordless sign-in, only the account name is restored and you must sign in again to complete setup.

Third-party accounts (Amazon, Gmail, etc.)

  • These accounts typically use a one-time password code that refreshes every 30 seconds.
  • The verification code entry is restored.

Troubleshoot common issues

Issue Resolution
"Sign in to add your account." Expected for work or school accounts after restore. Open the account and sign in again.
Restore from backup isn't available. Verify backup was enabled on the old phone, you're using the same recovery account, and you're restoring to the same device type.
No passkeys are available. Ensure the new phone has a screen lock enabled and that Bluetooth and internet connectivity are available for cross-device sign-in.