A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Microsoft Authenticator data (the one-time password entries) can only be restored if a cloud/iCloud backup was created before the reset and if the same type of device is used (iOS→iOS or Android→Android). If no backup exists, the Authenticator entries themselves cannot be recovered.
Key points from the documented behavior:
- Backup is not automatic
- On iOS, backup must be turned on under Settings → Backup → iCloud backup using a personal Microsoft account and iCloud.
- On Android, backup must be turned on under Settings → Backup → Cloud Backup using a personal Microsoft account.
- If this was not enabled before the factory reset, there is no stored Authenticator backup to restore.
- What gets restored if a backup exists
- For 3rd‑party accounts like Instagram or Facebook, Authenticator stores one-time password codes that refresh every 30 seconds. These codes are available again only if the backup is restored on a new device of the same platform.
- If no backup appears when trying to restore, the codes are not recoverable from Microsoft’s side.
- If no backup is available
- The only option is to recover access directly with the service that uses 2FA (Instagram/Facebook). This typically involves:
- Using their account recovery / “I can’t access my authenticator” / “lost 2FA device” flow.
- Providing any recovery codes they may have given when 2FA was set up (if saved elsewhere).
- Using email, SMS, or identity verification options they offer.
- Microsoft support and Authenticator cannot recreate or reveal the lost Instagram/Facebook 2FA secrets.
- The only option is to recover access directly with the service that uses 2FA (Instagram/Facebook). This typically involves:
- For future protection
- After regaining access to Instagram/Facebook, reconfigure 2FA and:
- Enable Authenticator cloud backup (Android) or iCloud backup (iOS) as documented.
- Save any recovery codes provided by Instagram/Facebook in a secure place.
- After regaining access to Instagram/Facebook, reconfigure 2FA and:
References: