Authenticator app not working on new phone? How to get back in

You set up the new phone, opened your authenticator app, and it's empty. Or the codes are there but every site rejects them. Now you're locked out of email, banking, or work.

By the end of this, you'll have your codes on the new phone (or your accounts recovered without them) and a backup in place.

The short answer

If you still have the old phone, don't wipe it or trade it in yet. Use the app's built-in transfer: Google Authenticator's Transfer accounts QR code, or Microsoft Authenticator's cloud backup and restore. If the old phone is gone, sign in with backup codes or another verification method, then re-add each account on the new phone.

Before you start

• Keep the old phone charged and untouched if you have it. It's your easiest way back in.
• Have your passwords handy, plus any backup codes you printed or saved when you first set up two-factor login.
• Allow 10–20 minutes for a transfer. Recovering accounts without the old phone can take longer, sometimes days for a provider's review.
• Know which app you use. Google Authenticator and Microsoft Authenticator work differently.

If you still have the old phone: Google Authenticator

Google Authenticator can sync codes to your Google account, which is the easiest fix. Check that first.

1. On the new phone, open Google Authenticator and sign in with the same Google account you used on the old phone.
2. Wait a moment for the codes to appear. If they do, you're finished.

No codes? Sync wasn't on. Do a direct transfer instead:

1. On the old phone, open Google Authenticator and tap the menu (three lines or your profile picture) → Transfer accounts → Export accounts.
2. Verify it's you, select the accounts to move, and tap Next. A QR code appears.
3. On the new phone, open Google Authenticator → menu → Transfer accounts → Import accounts → Scan QR code.
4. Scan the code on the old phone. If you moved a lot of accounts, you may get more than one QR code. Scan them all.

Your accounts should now show live six-digit codes on the new phone. Test two or three sites before you remove anything from the old phone.

If you still have the old phone: Microsoft Authenticator

Microsoft Authenticator restores from a cloud backup tied to a personal Microsoft account (Outlook.com, Hotmail, Live). Backups don't cross platforms, so an iPhone backup won't restore to Android, and an Android backup won't restore to an iPhone.

On the old phone, turn on backup:

1. iPhone: open Authenticator → Settings → toggle on iCloud Backup. Make sure iCloud Keychain is on in your iPhone's iCloud settings.
2. Android (Samsung or Pixel): open Authenticator → Settings → toggle on Cloud backup, then pick your personal Microsoft account.

On the new phone:

1. Install Microsoft Authenticator and open it.
2. Tap Begin recovery (or Restore from backup) and sign in with the same personal Microsoft account.

Personal accounts and most third-party codes come back on their own. Work or school accounts often show "Action required." Tap each one and follow the prompts. Some need you to sign in on a computer and re-register the phone under Security info in your work account. If that page won't let you in, your company's IT admin has to reset your sign-in method.

If the old phone is gone

Lost, broken, or snatched on the subway, it happens. You'll recover each account one at a time.

1. Go to the site's sign-in page and enter your password.
2. At the code prompt, look for Try another way, Use a different verification option, or I don't have my phone.
3. Use whatever backup you have: printed backup codes, a text message to your number, a security key, a passkey, or another signed-in device.
4. Once you're in, open that account's security settings, remove the old authenticator, and set it up again by scanning the new QR code with your new phone.
5. Generate fresh backup codes while you're there and store them somewhere safe.

No backup method at all? Use the provider's account recovery form. For Google, start the sign-in and choose the recovery option. For Microsoft, use the recovery form offered during sign-in. Answer from a device and location you've used before, and be as detailed as you can. It can take a few days.

Never pay anyone who promises to "unlock" your account. Real providers don't charge for recovery. If you suspect someone else got in first, follow our first-hour lockdown checklist for hacked email.

Still not working? Try these

Codes appear but get rejected. These codes are built from the current time, so a phone clock that's off by even a minute breaks them. Turn on automatic time:

1. iPhone: Settings → General → Date & Time → turn on Set Automatically.
2. Samsung: Settings → General management → Date and time → turn on Automatic date and time.
3. Pixel: Settings → System → Date & time → turn on Set time automatically.

Some accounts are missing after transfer. You probably didn't select them all on the export screen. Run Export accounts again on the old phone and pick only the missing ones.

Duplicate entries for the same site. Compare each code to what the site accepts and delete the one that fails. Do it only after you've confirmed the other one works.

A site still asks for the old phone. Some services (banks, some games, some work apps) don't use standard codes. They run their own app or push prompts. Log into that service's own app on the new phone, or contact their support to move the device.

Keep it from happening again

• Turn on cloud backup now. In Google Authenticator, stay signed into your Google account so codes sync. In Microsoft Authenticator, turn on iCloud Backup or Cloud backup.
• Save backup codes for your important accounts (email, Apple/Google/Microsoft, bank). Print them or keep them in a password manager. A password manager that stores verification codes also works as a second copy.
• Add a second method to key accounts, like a passkey or a hardware security key, so one lost phone can't lock you out.
• Migrate before you wipe. Treat the old phone as your key ring until every account works on the new one. For more prep, see the 10-minute lockdown to set up before your phone gets snatched.

Quick answers

Will restoring my iPhone from an iCloud backup bring my codes over? Not reliably. Codes from Microsoft Authenticator come back through its own backup, and Google Authenticator comes back through Google account sync. Do the in-app steps either way.

Can I move Microsoft Authenticator from iPhone to Android? Not through its backup, since iOS and Android backups aren't compatible. Re-add each account manually from each site's security settings.

Is it safe to sync codes to the cloud? For most people, yes, as long as that Google or Microsoft account has a strong password and its own two-factor login. Losing all your codes is the more common disaster.

Locked out and need it handled?

An ITGoNYC tech can connect with secure remote support, move your authenticator codes, re-register your work accounts, and walk you through recovery for anything without a backup. We'll give you a flat quote before any work. Call or text 347-549-9059 now for same-day help, or open a ticket.