Microsoft Authenticator can back up the account credentials and app settings needed to restore your sign-in codes on a replacement phone. The backup is platform-specific: an iPhone or iPad backup restores only to iOS, and an Android backup restores only to Android. One-time-password (OTP) accounts usually return with working 30-second codes, while passwordless Microsoft accounts and work or school accounts return only as account entries and require you to sign in again.
Set up the backup before changing phones, use the same recovery account or Apple services on the new device, and start Restore from backup or Begin recovery before signing in to individual accounts.
As an Amazon Associate I earn from qualifying purchases.
What Microsoft Authenticator backup contains
Authenticator’s backup is designed for account credentials used by the app, not for making a complete copy of your phone. It can preserve the data needed for rotating one-time-password codes and the account records that must be reauthenticated after a restore.
- Personal Microsoft accounts that use only a one-time password can return with their 30-second rotating codes ready to use.
- Personal Microsoft accounts that also use passwordless sign-in restore the account name, but you must sign in again to complete recovery.
- Work or school accounts restore the account name only. Your organization may require a password, approval, phone or email verification, device registration, or another check.
- Third-party OTP accounts, such as accounts for Amazon, Facebook, or Gmail, can restore their rotating one-time-password codes.
The backup does not include unrelated email, documents, photos, or files stored in other Microsoft services. It is also not a password vault. Microsoft ended Authenticator autofill in July 2025, and passwords were no longer accessible in the app from August 2025. Password export is handled separately; an exported password file is unencrypted until you import it and then delete the file.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Authenticator can contain personal Microsoft identities, work or school identities, and third-party accounts. Third-party accounts are normally added with a QR code or setup key supplied by that service, and their OTP secret is what enables code generation after restoration.
Platform limits you need to know before switching phones
Microsoft documents restore only within the same mobile platform. An iOS backup must be restored to another iPhone or iPad, and an Android backup must be restored to another Android device. There is no documented iOS-to-Android or Android-to-iOS restore path for an Authenticator backup.
| Old phone and backup | New phone | Supported restore result |
|---|---|---|
| iPhone or iPad using iCloud | iPhone or iPad | Supported when the required iCloud services and Authenticator data are enabled. |
| Android using cloud backup | Android phone or tablet | Supported when you use the same Microsoft personal recovery account and meet Android requirements. |
| iPhone or iPad | Android device | Not supported by the documented Authenticator backup restore. |
| Android device | iPhone or iPad | Not supported by the documented Authenticator backup restore. |
If you are moving between platforms, plan to enroll the accounts again on the new platform. Keep the old phone available, because you may need it to approve a sign-in or display a code while each service is reconfigured.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Turn on backup before replacing an Android phone
The Android procedure stores the backup under a Microsoft personal account. This is the recovery account for the Authenticator backup; it is separate from the work or school account whose codes you may be generating.
- Open Microsoft Authenticator on the old Android device.
- Tap the menu button, then tap Settings.
- Turn on Cloud Backup.
- When prompted, select the Microsoft personal account that will hold the backup and confirm the choice.
Leave the old phone connected long enough for the backup setting to finish, and open Authenticator normally before you hand the phone over or erase it. Verify that the accounts you expect to recover are visible in the app. A backup is useful only if you can still sign in to the selected recovery account.
Microsoft’s current guidance says that starting in January 2027, Android backup activation will change: you will no longer use a Microsoft personal account to enable backup and will instead enable Microsoft Authenticator from Google One backup. That is a future-dated platform change as of October 2026, so check Microsoft’s instructions when you perform the move; menus and eligibility may change before the date.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Turn on backup for an iPhone or iPad
iOS restore depends on Apple’s iCloud services rather than a Microsoft recovery account. Enable the services on the old device before you change phones, and make the same services available on the new device.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems- Open the iOS Settings app and make sure iCloud Drive is enabled.
- Enable iCloud Keychain.
- Enable iCloud Backup.
- In the device’s Saved to iCloud list, turn on Authenticator.
- Open Microsoft Authenticator on the old iPhone or iPad at least once after enabling these options.
The documented restore path requires iCloud Drive, iCloud Keychain, iCloud Backup, and Authenticator in the Saved to iCloud list. If any of those services is unavailable on either device, the backup may not appear during recovery.
Restore Authenticator on the replacement phone
Install the app on the new phone, but do not sign in to individual accounts first. Microsoft specifically warns that recovery links must be used before account sign-in.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Install Microsoft Authenticator from the device’s official app store.
- On the first setup screen, choose Restore from backup or Begin recovery.
- For Android, sign in with the same Microsoft personal recovery account used when the backup was created. For iOS, sign in to the same Apple iCloud environment with the required iCloud services enabled.
- Wait for the account list to populate. Do not add or sign in to accounts individually while the restore option is still available.
- For every entry marked Sign in or Action required, open the entry, provide its password if requested, and complete the requested email, phone, approval, or other verification.
- Test a code or approval from each important account before wiping the old phone.
If you already signed in to accounts and the restore choice disappeared, Microsoft’s documented recovery warning says: “Select either Restore from backup or Begin recovery links before signing in. If you have signed in, sign out before proceeding with account recovery.” Sign out of the affected accounts, or remove them from Authenticator, then restart the recovery flow.
What each account type requires after restoration
| Account type | What is restored | What you must do next |
|---|---|---|
| Microsoft personal account, OTP only | Account and rotating 30-second codes | Usually usable immediately; confirm a code works before retiring the old phone. |
| Microsoft personal account with passwordless sign-in | Account name | Sign in again and complete the requested verification to recreate passwordless access. |
| Work or school account | Account name | Sign in again; your organization may require additional verification or device registration. |
| Third-party OTP account | Rotating one-time-password codes | Usually no re-enrollment is needed, but test the code with the service before deleting the old installation. |
“Restored” does not therefore mean that every account is immediately ready. OTP-only entries contain the secret needed to calculate codes, whereas passwordless and managed organizational accounts have protections that require a fresh sign-in or registration.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteTroubleshoot a backup that does not appear
iPhone or iPad shows no backup
- In iOS Settings, verify iCloud Drive, iCloud Keychain, and iCloud Backup are on.
- Open the Saved to iCloud list and confirm Authenticator is enabled.
- Update Authenticator to version 6.8.33 or later.
- Return to the old phone and open Authenticator at least once before switching again.
- On the new device, use the same Apple account and allow iCloud services to finish syncing before starting recovery.
Android restore is missing or incomplete
- Confirm that you are signing in with the exact Microsoft personal account selected for Cloud Backup, not a work or school identity.
- On an Android device, ensure Google Play Services and the Google Play Store are installed and enabled.
- Enable push notifications for Authenticator if you need approval prompts.
- Check that the device has a screen PIN, passcode, or biometric protection. Device security can affect passwordless use.
- For work or school accounts, be prepared to complete organizational registration again; restoring the account name does not bypass your employer’s or school’s policy.
The recovery account cannot be accessed
Microsoft says its support agents cannot recover an Authenticator backup when the recovery account itself is inaccessible. Regain access to that Microsoft personal account through its account-recovery process, or add and enroll the accounts again on the new phone. Do not erase the old phone until you know which route is available.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
An account restored but asks for action
Open the account marked Sign in or Action required, enter the account password when requested, and complete the displayed email, phone, approval, or other verification. This is expected for passwordless personal accounts and work or school accounts; it does not indicate that the entire backup failed.
A safe phone-change checklist
- Identify whether the old and new devices use the same platform.
- Turn on the appropriate Android or iOS backup settings while the old phone still works.
- Confirm that the selected Microsoft personal recovery account or Apple iCloud account is accessible.
- Update Authenticator, especially on iOS where version 6.8.33 or later is required by Microsoft’s troubleshooting guidance.
- Keep the old phone online and unlocked until every important account has been tested on the new one.
- Start recovery before signing in to individual accounts.
- Complete every Sign in or Action required prompt, including organization-specific checks.
- Only after testing codes and approvals should you wipe, trade in, or retire the old device.
What this backup cannot do
Authenticator backup is not a cross-platform migration tool, a backup of your Microsoft mailbox or files, or a replacement for account-recovery methods. It cannot recover a backup whose Microsoft recovery account is inaccessible, and it does not preserve every authentication method equally. OTP secrets generally come back with usable codes; passwordless and managed accounts deliberately require renewed proof of identity.
It also does not restore passwords from Authenticator. Since autofill stopped working in July 2025 and passwords were no longer accessible in the app from August 2025, use Microsoft’s separate password-export documentation if you need to move passwords. Treat an exported file as sensitive because it remains unencrypted until it is imported and deleted.
Bottom line for a new-phone move
Enable backup before the move, stay on the same operating-system family, and use the same recovery environment. Android uses Authenticator Cloud Backup associated with a Microsoft personal account under the current guidance; iPhone and iPad use iCloud Drive, iCloud Keychain, iCloud Backup, and the Authenticator entry in Saved to iCloud. Begin recovery before signing in to accounts, then expect OTP-only accounts to return most completely and passwordless or work-and-school accounts to require reauthentication.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
