How to Transfer Authenticator to a New Phone Securely Without Lockout

Avoid Account Lockout When Upgrading Your Phone

Upgrading to a new smartphone is the single most common cause of two-factor authentication lockout. Because TOTP authenticators store cryptographic secrets locally within secure hardware storage, simply restoring a general cloud backup may not automatically copy your active 2FA tokens.

Follow this checklist to migrate all your two-factor accounts safely without risking account lockout.

Golden Rule: Never Wipe Your Old Phone First

Do not perform a factory reset on your old phone until you have verified that every single account generates valid, working codes on your new device and you have tested at least one live login.

1. How to Transfer Google Authenticator

Google Authenticator provides a built-in encrypted transfer function that exports all accounts using a single batch QR code:

1. Open Google Authenticator on your old phone.
2. Tap the hamburger menu (or profile icon) > Transfer accounts > Export accounts.
3. Authenticate with biometric verification (Face ID or fingerprint). Select all accounts you wish to migrate.
4. A dynamic QR code will appear on the old device screen.
5. Open Google Authenticator on your new phone, select Transfer accounts > Import accounts, and scan the QR code displayed on the old phone.
6. Verify that the account names and 6-digit codes match between both screens before tapping done.

2. How to Transfer Microsoft Authenticator

Microsoft Authenticator utilizes encrypted cloud backups tied to your personal Microsoft or Apple account:

1. On your old phone, open Microsoft Authenticator > Settings > Backup, and turn ON Cloud Backup.
2. Note the recovery account email associated with the backup.
3. On your new phone, install Microsoft Authenticator. Do not choose “Add account”; instead, tap “Restore from backup” on the initial setup screen.
4. Log in with the exact recovery credentials to restore all tokens.

3. How to Migrate Meta / Facebook Business Manager 2FA

If you use 2FA for Meta Business Suite, advertising assets, or personal Facebook accounts:

• Log into Facebook on your desktop computer and navigate to Accounts Center > Password and Security > Two-Factor Authentication.
• If you have your original setup Base32 key saved in an encrypted password manager, you can test it directly on our Free TOTP Generator to confirm validity.
• Click “Manage Authenticator App”, scan the new QR code with your new device, and input the generated code to update Meta's active registration.

4. Emergency Failsafes to Prepare Before Decommissioning

Before wiping or trading in your old device, ensure you have secured the following:

• Download Single-Use Recovery Codes: For critical accounts (Google, GitHub, Meta, password managers), generate a fresh set of printable emergency backup codes.
• Verify SMS / Email Fallbacks: Ensure secondary recovery phone numbers and backup email addresses are current.
• Factory Reset the Old Device: Once all codes are verified on the new phone, perform a full cryptographic factory wipe on the old device to prevent unauthorized retrieval of residual app data.

For more details on why authentication codes fail or how to troubleshoot synchronization problems, explore our guide on fixing authenticator codes that aren't working.