Which phone are you using?
Pick one phone. The guide then shows only that phone's steps, screenshots, store link, backup, and passkey settings.
Showing iPhoneAndroid steps.
1. Before you start
Use a computer and your phone together. Do not erase, trade in, reset, or remove Authenticator from an old phone until the new phone has passed every test in this guide.
Have these ready
- Your work email address and password
- Your unlocked phone
- A computer with internet access
- Access to your current sign-in method, or help-desk assistance
- A screen lock on the phone: PIN, Face ID, Touch ID, or fingerprint
If this is a replacement phone
- Keep the old phone powered on and connected
- Complete backup on the old phone first
- Confirm the move is iPhone → iPhone. Authenticator backup cannot move to Android.
- Confirm the move is Android → Android. Authenticator backup cannot move to iPhone.
- Know the recovery account used for backup
- Wait to remove the old method until the new one works
2. Download the official app
Use only the links or QR codes below. Verify the exact app name and publisher before installing.
iPhone
Apple App Store
App: Microsoft Authenticator
Developer: Microsoft Corporation
App ID: 983156458
Android
Google Play
App: Microsoft Authenticator
Publisher: Microsoft Corporation
Package: com.azure.authenticator
-
Open the correct listing
On your iPhone, scan the App Store QR code with the Camera app, or tap Open App Store.
On your Android phone, scan the Google Play QR code with the Camera app, or tap Open Google Play.
-
Verify before installing
Confirm the blue lock/person icon, the name Microsoft Authenticator, and publisher/developer Microsoft Corporation. If any item differs, stop.
-
Install and open
Tap Get. Open the app. Accept the privacy screens. Allow notifications; allow camera access when asked so the app can scan your work QR code.
Tap Install. Open the app. Accept the privacy screens. Allow notifications; allow camera access when asked so the app can scan your work QR code.
3. Connect your work or school account
The QR code shown during this process is a private setup secret. Scan it only inside Authenticator. Never email it, photograph it, or send it to anyone.
-
Open Security info on the computer
Go to mysignins.microsoft.com/security-info and sign in with your work account. Before entering anything, confirm the page address begins exactly with https://mysignins.microsoft.com/.
-
Add Microsoft Authenticator
Select + Add sign-in method → Microsoft Authenticator (sometimes shown as Authenticator app) → Add. Select Next until the computer displays a QR code. Leave that page open.
-
Open the account menu on the phone
In Authenticator, choose Add work or school account. If you are already past the first screen, tap + or Add account, then choose Work or school account.
-
Scan the setup QR code
Choose Scan a QR code on the phone and point it at the QR code displayed on the computer. If scanning fails, select Can't scan the image on the computer and use Enter code manually in the app.
-
Complete the test
Select Next on the computer. Microsoft sends a test request. If the computer displays a two-digit number, enter that number in Authenticator, choose Yes or Approve, then unlock the phone if prompted. The computer should report success.
Learn about backing up Microsoft Authenticator
4. Protect your recovery
| iPhone | Android |
|---|---|
| Backup uses iCloud: iCloud Drive, iCloud Keychain, iCloud Backup, then Authenticator in Saved to iCloud. | Cloud Backup is stored in a Microsoft personal account. Tap OK after you select that account. |
| Restores only to another iPhone. | Restores only to another Android phone. |
iPhone backup
Turn on iCloud, then Authenticator
On iPhone, enable iCloud for Authenticator. Backup then works through iCloud.
Enable iCloud Drive.
Enable iCloud Keychain (Passwords and Keychain).
Enable iCloud Backup.
Go to Saved to iCloud, search for Authenticator, and turn Authenticator on.
Settings → Apple Account → iCloud → iCloud Drive, Passwords and Keychain, iCloud Backup, then Saved to iCloud → Authenticator: On
Android backup
Turn on Cloud Backup
To back up one-time password accounts on Android:
Open Microsoft Authenticator.
Tap the menu (often ☰ or ⋮), then Settings.
Turn on the Cloud Backup toggle.
Select a Microsoft personal account where the backup will be stored.
Tap OK.
Delete a backup
Use this if you want to delete a backup, or if you signed in with the wrong backup account.
Open Authenticator, tap the menu, then Settings.
Under Backup, turn off the Cloud Backup toggle and select OK to delete the backup.
To make a fresh backup, turn Cloud Backup on again, and select Continue or Change account to sign in to the correct backup account.
"Something went wrong"
If you see Something went wrong when backing up one-time password accounts, you are not signed in. Under Backup, turn on Cloud Backup and select Continue or Change account to sign in and create a backup.
Authenticator → menu → Settings → Cloud Backup: On → personal Microsoft account → OK
What account information is backed up
The same account information is backed up on iPhone and Android. Microsoft Support — Back up your accounts in Microsoft Authenticator.
| Account | What is backed up |
|---|---|
| Microsoft personal account that only uses a one-time password code (refreshes every 30 seconds) | The password codes will be available once restored. |
| Microsoft personal account that also uses passwordless sign-in | Only the account name is backed up. When you restore, you will need to sign in again. |
| Work or school account | Only the account name is backed up. When you restore, you will need to sign in again. |
| 3rd-party accounts, such as Amazon, Facebook, or Gmail | These use a one-time password code which refreshes every 30 seconds. The password codes will be available once restored. |
| Authenticator device-bound passkey | Not transferred by Authenticator account backup. Create a new passkey on the new phone. |
5. Set up a passkey
Requirements: phone screen lock enabled; current Authenticator; iOS 17 or newer.
Requirements: phone screen lock enabled; current Authenticator; Android 14 or newer. Microsoft recommends upgrading to Android 15 if Authenticator cannot be enabled as a passkey provider on Android 14.
-
Start from Security info
On a computer or the same phone, open Security info. Select + Add sign-in method → Passkey in Microsoft Authenticator → Add or Next. Complete MFA if prompted.
-
Create the passkey in Authenticator
Open Authenticator when prompted. Tap your work account, then tap Create a passkey. Complete the work-account sign-in and approve the request.
-
Allow Authenticator as a passkey provider
Authenticator may send you to iPhone Settings. Complete the iPhone steps below, then return to Authenticator.
Authenticator may send you to Android Settings. Complete the Android steps below, then return to Authenticator.
iPhone
iOS 18: Settings → General → AutoFill & Passwords.
iOS 17: Settings → Passwords → Password Options.
Turn on AutoFill Passwords and Passkeys. Under AutoFill From, enable Authenticator.
Android
The exact path varies by manufacturer. Search phone Settings for passkey or passwords. Open Passwords & accounts or Passwords, passkeys & autofill. Under additional providers, enable Authenticator.
-
Finish and verify
Return to Authenticator and tap Done. Return to the browser and select Next, then Done. Security info should show the newly created passkey.
6. Test before you depend on it
Run these checks while you still have your old method and an open signed-in session.
- Security info: Microsoft Authenticator appears as a method.
- Fresh sign-in: open a private/incognito browser and sign in to Microsoft 365.
- Number matching: the number on the computer can be entered in Authenticator and approved.
- Passkey: if created, choose Other ways to sign in and test the passkey.
- Backup: iPhone iCloud settings still show Authenticator backup enabled.
- Backup: Android Cloud Backup still shows enabled.
- Backup method: add at least one additional IT-approved method if your organization offers one. Microsoft recommends three registered methods to reduce lockout risk.
7. Move to a new phone without getting locked out
-
Confirm the old phone's backup
On the old iPhone, confirm iCloud Drive, iCloud Keychain, iCloud Backup, and Authenticator in Saved to iCloud. Use Authenticator version 6.8.33 or later, and open the app at least once before you switch phones. Backup and restore stay iPhone → iPhone.
Repeat the Android backup checks in section 4. Backup and restore must stay on the same platform: Android → Android.
-
Prepare the new phone
Sign in with the same Apple Account. Enable a screen lock. Install the official Authenticator app using section 2.
Make sure you know the same personal Microsoft recovery account. Enable a screen lock. Install the official Authenticator app using section 2.
-
Begin recovery before adding accounts manually
On Authenticator's first-run screen, choose Restore from backup or Begin recovery. Use the same recovery identity used on the old phone. If you already added accounts and cannot find recovery, uninstall and reinstall Authenticator, then start recovery from the first-run screen.
-
Re-enable every work account
A restored work account can show red text such as Sign in to add your account. Open it, choose Sign in, and finish authentication. If push approvals still go only to the old phone, use the old phone to open Security info and register Authenticator on the new phone again using section 3.
-
Create a new passkey if needed
Device-bound Authenticator passkeys do not move through Authenticator backup. Follow section 5 on the new phone, then test the new passkey.
-
Test, then retire the old phone
Repeat every applicable check in section 6. Only after success, return to Security info and remove obsolete Authenticator registrations or old passkeys. Do not remove a method you cannot positively identify; ask the help desk.
Switching between iPhone and Android?
You can only back up and restore on the same device type. Accounts backed up using an iPhone cannot be restored on an Android phone, and the reverse is also true. Treat a platform change as a fresh setup: keep the old phone, install Authenticator on the new phone, add the new registration from Security info, create a new passkey if required, test it, and only then remove the old methods.
I don't see my backup on the new iPhone
On the old iPhone:
- Enable iCloud Drive, iCloud Keychain, and iCloud Backup.
- Go to Saved to iCloud, search for Authenticator, and turn it on.
- Upgrade to Authenticator version 6.8.33 or later.
- Open the app at least once before switching to the new phone.
On the new iPhone: uninstall and reinstall Authenticator. Your backup should now appear.
8. Troubleshooting and safe recovery
I cannot sign in to Security info
Try Sign in another way and use a method you still control. If none works, stop and contact your organization's help desk. An administrator may need to reset your authentication methods or issue a Temporary Access Pass.
The QR code will not scan
Increase the computer's screen brightness, clean the phone camera, allow camera permission, and keep the full QR code visible. Otherwise select Can't scan the image on the computer and Enter code manually in Authenticator.
Notifications do not arrive
Confirm notifications are allowed for Authenticator, the phone has internet access, date/time are automatic, battery-saving settings are not suspending the app, and the account was signed in again after restore. Open the app manually and retry.
Restore from backup is missing
On the old iPhone, confirm iCloud Drive, iCloud Keychain, iCloud Backup, and Authenticator in Saved to iCloud. Use Authenticator 6.8.33 or later, and open the app at least once before you switch phones. On the new iPhone, uninstall and reinstall Authenticator. Your backup should then appear.
"Something went wrong" when backing up
If you see Something went wrong when backing up one-time password accounts, you are not signed in. Open Authenticator, tap the menu, then Settings. Under Backup, turn on Cloud Backup and select Continue or Change account to sign in and create a backup. If the backup is on the wrong account, turn Cloud Backup off, select OK to delete it, then turn it on again and choose the correct account.
The restored work account says “Sign in to add your account”
This is expected. Backup restored the name, not the working approval credential. Open the account and sign in. If necessary, register the new phone again from Security info.
The passkey option is missing or fails
Your organization may not allow Authenticator passkeys. Confirm the phone meets version requirements, has a screen lock, and Authenticator is enabled as a passkey provider. Do not delete the old passkey until a replacement works.
Verification and official sources
The product images in this guide are the official ones. The app icon and store media came from the current official Apple listing; setup, passkey, and restore screenshots came from Microsoft Learn; the download QR code points to the official App Store listing. No generated or third-party instructional screenshots are used.
The product images in this guide are the official ones. The app icon and store media came from the current official Google Play listing; setup, passkey, and restore screenshots came from Microsoft Learn; the download QR code points to the official Play listing. No generated or third-party instructional screenshots are used.
- Microsoft Support — Download Microsoft Authenticator
- Microsoft Support — Add accounts to Authenticator
- Microsoft Support — Back up Authenticator accounts
- Microsoft Support — Restore Authenticator credentials
- Microsoft Learn — Transfer Authenticator to a new phone
- Microsoft Learn — Register passkeys in Authenticator
- Microsoft Support — Passkey requirements and behavior
- Official Apple App Store listing
- Official Google Play listing
UI labels can change as Microsoft, Apple, Google, or the phone manufacturer updates software. Follow the intent of each step and contact the help desk if the displayed publisher, domain, or security method differs.
Microsoft Authenticator end-user guide · Reviewed September 24, 2026 · Do not place passwords or recovery codes in a printed copy.