Download and install Microsoft Authenticator on your new device first
Microsoft Authenticator is an app that generates security codes or sends approval notifications to confirm your identity when you sign into Microsoft accounts. When you get a new phone, you need to install the app fresh and then add back the accounts it was protecting on your old device.
Start by opening the app store on your new phone. On Android, open Google Play Store. On iPhone, open the App Store. Search for "Microsoft Authenticator" — make sure it shows the Microsoft logo and is published by Microsoft Corporation. Tap the install button and wait for the download to finish. The app is free.
Once installed, open Microsoft Authenticator. You will see a screen asking you to add an account. Do not add anything yet if you had accounts set up on your old phone — you will do that in the next step.
Key Takeaways
- Install Microsoft Authenticator from Google Play Store (Android) or App Store (iPhone) before you try to sign in anywhere.
- You cannot transfer authenticator codes from your old phone to your new one — you must re-add each account through the app.
- When you re-add an account, Microsoft will ask you to confirm your identity by entering a code sent to your email or phone number.
- If you cannot access your old phone, you can still recover your accounts by using a backup email address or phone number associated with your Microsoft account.
Sign in with your Microsoft account to restore your accounts
In Microsoft Authenticator, tap the plus sign or "Add account" button. Choose "Work or school account" or "Personal Microsoft account" depending on which type of account you are restoring. You will be taken to a sign-in screen.
Enter the email address or phone number for the Microsoft account you want to add back. Microsoft will send a code to that email address or phone number — check your email inbox or text messages for a six-digit code. Enter that code into the app. This step confirms that you own that account and are allowed to add it to your new phone.
After you enter the code correctly, the account will appear in your Microsoft Authenticator app. Repeat this process for each account you had set up on your old phone. Each account needs to be added separately.
What to do if you cannot access your old phone
If your old phone is lost, broken, or you no longer have it, you can still restore your accounts. When you try to sign in with your Microsoft account and the app asks for a code, look for a link that says "Can't access your authenticator app?" or "Use a different verification method."
Tap that link. Microsoft will offer you other ways to prove your identity — usually a code sent to a backup email address, a code sent to a phone number on file, or security questions you set up previously. Use whichever method you have access to. Once you verify your identity this way, you can add the account to your new Microsoft Authenticator app.
If you set up a recovery code or backup phone number when you first created your Microsoft account, have that information ready. These are specifically designed to help you regain access when your authenticator app is not available.
Add accounts from other services if you used Authenticator for them
Microsoft Authenticator can protect accounts beyond just Microsoft — many banks, email providers, and other services let you use it for two-factor authentication. If you had non-Microsoft accounts set up in the app on your old phone, you will need to add them again on your new phone.
In Microsoft Authenticator, tap the plus sign and choose "Other account" or "Non-Microsoft account" depending on what your version shows. You will be asked to scan a QR code or enter a setup key. Log into the website or service for that account, find the two-factor authentication settings, and look for an option to set up an authenticator app. That page will show you a QR code — use your new phone's camera to scan it directly from the Microsoft Authenticator app, or copy the setup key and paste it into the app.
Each service handles this slightly differently, so if you are stuck, look for a help link on that service's two-factor authentication page. The setup key is usually labeled "manual entry key" or "secret key" if you cannot scan the QR code.
Test that your accounts are working before you delete the old app
Before you consider the transfer complete, sign out of one of your accounts on a website or service and sign back in. When prompted for your authenticator code, open Microsoft Authenticator on your new phone and confirm that the code appears. This tells you the account is properly connected to your new device.
If the code does not appear, go back and check that you added the account correctly. The most common mistake is adding the account but not confirming the verification code that Microsoft sent to your email or phone. If you skipped that step, delete the account from the app and start over.
Once you have tested at least one account and confirmed it works, you can safely delete Microsoft Authenticator from your old phone if you still have access to it. You can also remove the old phone from your Microsoft account's trusted devices list by signing into account.microsoft.com, going to Security settings, and removing the old device.
Backup codes and recovery options to keep safe
When you first set up two-factor authentication on a Microsoft account, you may have received a list of backup codes — usually ten single-use codes that work if you cannot access your authenticator app. If you saved these codes, store them somewhere safe like a password manager or a locked drawer. Do not take a screenshot and leave it on your phone.
You can also add a backup phone number or backup email address to your Microsoft account. Go to account.microsoft.com, select Security, and look for "Additional security info." Add a phone number or email that you have reliable access to. This way, if you lose access to your authenticator app again in the future, Microsoft can send a code to that backup method.
Frequently Asked Questions
Can I copy my authenticator codes from my old phone to my new phone without re-adding accounts?
No. Authenticator codes are generated on each device and cannot be transferred. You must re-add each account on your new phone by signing in with your Microsoft account and confirming your identity with a code sent to your email or phone number. This is a security feature — it ensures that only someone with access to your email or phone can set up the app on a new device.
What if I forgot the password to the Microsoft account I am trying to add?
When you try to sign in during the account-add process, look for "Can't access your account?" or a similar link. Follow the steps to reset your password. You will need access to the email address or phone number associated with that account. Once you reset the password, you can sign in and complete adding the account to your new phone.
Do I need to remove Microsoft Authenticator from my old phone?
You do not have to, but it is a good idea for security. If your old phone is lost or stolen, someone with access to it could see your authenticator codes. Delete the app from your old phone if you still have it, or remotely wipe the phone if you cannot access it. You can also sign out of the account in the app before deleting it.
Will my bank or other services know I moved the app to a new phone?
No. Banks and other services do not track which phone your authenticator app is on — they only care that you can provide the correct code when you sign in. Once you have re-added your accounts to your new phone, everything works the same way as before.
What if the QR code for a non-Microsoft account will not scan?
Most services that use authenticator apps offer a manual entry option. Instead of scanning the QR code, look for a link that says "Can't scan?" or "Enter setup key manually." Copy the long string of characters shown there, then in Microsoft Authenticator tap the plus sign, choose "Other account," and paste the key into the field provided. This accomplishes the same thing as scanning the QR code.