A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
To sign in to Microsoft Authenticator on a new phone when the app itself is the only way to get a code, another verification method or an admin reset is required. The app alone cannot be recovered without one of these:
- Use an alternative sign-in/verification method
If any other method was set up (text message, phone call, email, security key, or another authenticator app), use that instead of the old Authenticator:- When prompted for a code from Authenticator, choose I don’t have my Microsoft Authenticator app or Sign in another way.
- Select one of the other methods (SMS, call, email, security key) to complete sign-in.
- After signing in, reconfigure Authenticator on the new phone by adding it as a verification method:
- Go to the Microsoft account Security page: https://account.microsoft.com/security.
- Select Manage how I sign in.
- Select Add a new way to sign in or verify → Use an app.
- Follow the instructions to scan the QR code with Authenticator on the new phone.
- If this is a work or school account and there is an admin
If the account is managed by an organization (Microsoft 365/Entra ID):- Contact the organization’s Microsoft 365/Entra administrator.
- Ask them to reset the MFA settings for the account (for example, by using Require re-register multifactor authentication in the Microsoft Entra admin center).
- After the reset, sign in again and set up Authenticator on the new phone using the new QR code.
- If there is no alternative method and no admin reset
If no backup method (SMS, email, etc.) was configured and there is no admin who can reset MFA, access to the protected account cannot be restored through Authenticator alone. In that case, follow the account recovery or support path for the specific account type (personal Microsoft account vs. business/education tenant) so that MFA can be reset by support, as described in the moderator guidance for similar lockout situations.
Once access is restored using any of the above, add at least one backup method (text, call, email, or security key) so that future device changes do not cause the same issue.
References: