A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
For a Rockstar (third‑party) account protected by Microsoft Authenticator, only Rockstar can ultimately restore or change the 2FA requirement on that account. Microsoft Authenticator is just generating codes based on the secret Rockstar originally gave; once the original device is gone and there is no backup to restore, Microsoft cannot recreate or bypass Rockstar’s 2FA setup.
From the Microsoft side, the only options are:
- Confirm whether any backup exists for Microsoft Authenticator on iOS
- Authenticator on iOS can back up accounts to iCloud. To restore, the backup must have been created on the old phone and then restored on the new phone using the same Apple ID.
- If the backup was not created before selling the old iPhone, or if the backup does not contain the Rockstar entry, there is no way for Microsoft to recover that specific 2FA secret.
- Understand what can and cannot be restored
- For third‑party accounts (like Rockstar), Authenticator backs up the one‑time password configuration so that codes work again after restore, but only if that backup exists and is restored correctly.
- If the Rockstar entry is missing on the new phone after restore, the shared secret used to generate codes is effectively lost.
- Next steps with Rockstar
- Because the 2FA secret for the Rockstar account is generated and managed on Rockstar’s side, only Rockstar Support can:
- Disable 2FA on the account, or
- Replace/reset the 2FA method so a new QR code or secret can be added to Authenticator on the new phone.
- When contacting Rockstar, it is necessary to explain that:
- The old iPhone with the working Authenticator instance is no longer available.
- No usable Authenticator backup exists for that specific account.
- Microsoft cannot recover or override the 2FA secret for a third‑party service.
- Then follow Rockstar’s account‑recovery process (usually providing proof of account ownership, past transaction details, etc.) so they can remove or reset 2FA.
- Because the 2FA secret for the Rockstar account is generated and managed on Rockstar’s side, only Rockstar Support can:
If access is also needed to a Microsoft work, school, or personal account that used the same Authenticator and that account is now inaccessible, the recovery options differ and may involve alternate verification methods or, for work/school tenants with a single admin, escalation to Microsoft’s Data Protection team. But for the Rockstar service itself, only Rockstar can remove or reset its 2FA requirement.
References: