Change of phone

On the new phone, one-time passwords (OTP) only appear if the accounts were backed up from the old phone and then restored. Otherwise, the OTP secrets stay only on the old device and must be reconfigured for each service.

To move them without losing access, use the backup/restore feature, then verify each account before removing the old phone.

1. On the old phone (iOS)
   1. Make sure backup is correctly configured:
      • Enable iCloud Drive on the device. Learn how.
      • Enable iCloud Keychain. Learn how.
      • Enable iCloud Backup. Learn how.
      • Go to your Saved to iCloud list and search for Authenticator. Learn how, then turn on the toggle for Authenticator.
      • Ensure Microsoft Authenticator is version 6.8.33 or later.
      • Open the Authenticator app at least once so it updates the backup.
2. On the new phone (iOS)
   1. If Authenticator is already installed and not showing the backup:
      • Uninstall the Authenticator app.
      • Reinstall the Authenticator app from the store.
      • Open it and choose the option to Restore from backup / Begin recovery (if prompted).
      • Sign in with the same personal Microsoft account that was used for backup.
      • The accounts and OTP codes that are backed up will be restored.
3. What will be restored
   • Microsoft personal accounts
     • If configured only with a 30‑second one-time password code, the codes are restored and usable immediately.
     • If configured for passwordless sign-in, only the account name is restored; sign-in is required again on the new phone.
   • Work or school accounts
     • Only the account name is restored; sign-in is required again.
   • 3rd party accounts (Amazon, Facebook, Gmail, etc.)
     • The 30‑second OTP codes are restored and usable.
4. If “Restore from backup” does not appear (Android scenario)
   • Remove or sign out of all accounts in Authenticator, then reopen the app and select Restore from backup or Begin recovery before signing in.
5. Before discarding the old phone
   • Confirm that every account on the new phone either:
     • Shows a working OTP code, or
     • Shows “Sign in to restore your account” and can be completed by tapping Sign in and finishing verification.
   • Only after verifying access to all services from the new phone should the old phone be wiped or discarded.

If some services do not restore OTP codes (for example, work/school accounts or passwordless accounts), they must be re-registered on the new phone by signing into those services and setting up Microsoft Authenticator again before getting rid of the old device.

References:

• Microsoft Authenticator FAQs
• Restore account credentials from Microsoft Authenticator
• Back up your accounts in Microsoft Authenticator