For a personal Microsoft account, the fix depends on whether a backup exists and whether any alternate sign-in method is available.
- Try restoring Authenticator first
- On the new phone, install Microsoft Authenticator.
- If backup had been enabled on the old phone, sign in with the same Microsoft personal account used as the recovery account and restore from backup.
- For personal accounts, if the account used only a one-time password code, that code entry is restored.
- If the account also used passwordless sign-in, only the account name is restored and sign-in is still required to complete setup.
- If restore is not available
- Verify that backup had been enabled on the old phone.
- Verify that the same recovery account is being used.
- If moving between device types, restore must be to the same device type.
- If the backup cannot be restored because the backup account cannot be accessed
- Use the Microsoft account sign-in helper: Sign-in helper
- Support agents cannot restore Authenticator credentials when the backup account itself is inaccessible.
- If no backup exists or restore still fails
- Add the accounts again in Microsoft Authenticator.
- If the account shows Action required after restore, open the account in Authenticator, tap the account tile, choose the option to sign in to recover, then enter the password and complete the additional verification.
- If sign-in prompts are still going to the old phone
- If the old phone is still available, approve the sign-in there once, then update the sign-in methods.
- If not, use a different verification method such as SMS if one was previously configured.
For future phone changes, complete the transfer before erasing or trading in the old phone, and keep the old phone until sign-in is confirmed on the new one.
References: