Skip to content

How to Transfer MFA to a New Phone (Microsoft 365)

Applies toMicrosoft 365, Microsoft Authenticator App
7 min fix Updated 16 Aug 2026
Quick Answer

Before getting rid of your old phone, go to aka.ms/mfasetup, click 'Add sign-in method', and add your phone number for SMS text messages. Use the text message to log in on the new phone and register the Authenticator app.

Checked against Microsoft Learn - end of support and retirement, Microsoft 365 Roadmap and between 5 Aug 2026 and 12 Sep 2026. Nothing published in that period has been linked to this guide.

Corrected 16 Aug 2026. This guide said the Cloud Backup feature in Microsoft Authenticator restores your account tokens on a new phone. Microsoft's documentation states that for a work or school account only the account name is backed up, and that you have to sign in again when you restore it — so a backup on its own does not get you back into Microsoft 365. The guide has been corrected. Every correction to this guide →

Summary

When you get a new phone, the Microsoft Authenticator app does not transfer automatically. This guide walks you through adding SMS as a temporary backup method before you swap phones, then using it to sign in on your new device, set up the Authenticator app fresh, and remove your old phone.

Before You Start

  • Make sure you are signed in to your Microsoft 365 account and able to approve MFA prompts on your current phone. If the old phone is already gone, wiped, or broken, this guide will not work — see How to Recover Microsoft Authenticator After Losing Your Phone.
  • You need to know the phone number that will carry over to your new device (same SIM or number transfer).

Instructions

1. Add SMS as a Backup Sign-In Method (Do This Before Swapping Phones)

This step is critical. Adding a text-message option while you still have your current phone ensures you can get into your account after the swap.

Note: Text-message codes work for this today, and Microsoft has published an end date for its own text and phone-call delivery. From September 1, 2026, passkeys are enabled automatically for anyone currently set up for SMS or voice. From February 1, 2027, organizations that have not arranged their own telecom provider through the Microsoft Security Store can no longer use SMS or voice for MFA; organizations that do arrange one keep both methods. Treat SMS as the bridge it is here — do not stop at Method 2, finish Method 3 so the Authenticator app is registered on your new phone.

The Cloud Backup feature inside the Authenticator app does not remove the need for this step. Microsoft's backup carries your personal and third-party account codes, but for a work or school account "only the account name is backed up. When you restore, you will need to sign in again." A restored backup hands you the account tile and then asks you to sign in, so you still need a verification method that does not live on the phone you are replacing.

  1. Open a browser on your computer and go to https://mysignins.microsoft.com/security-info.
  2. Sign in and approve the MFA prompt on your current phone.
  3. On the Security info page, click + Add sign-in method.
  4. From the dropdown, select Phone and click Add.
  5. Select your country code, enter your mobile phone number, and ensure Text me a code is selected.
  6. Click Next. A verification code will be sent to your phone via text message.
  7. Enter the code and click Next to confirm.
  8. SMS is now registered as an additional sign-in method. You will see it listed on the Security info page.

2. Sign In on Your New Phone Using SMS

After your new phone is set up and your phone number is active on it, use the SMS method to get back into your account.

  1. On your new phone, open the Outlook app or go to https://portal.office.com in a browser.
  2. Enter your work email and password.
  3. When prompted for MFA, look for I can't use my Microsoft Authenticator app right now or Use a different verification option.
  4. Select Text a code to my phone.
  5. Enter the code from the text message and sign in.

3. Set Up Microsoft Authenticator on the New Phone

Now that you are signed in, add the Authenticator app back as your primary MFA method.

  1. Install Microsoft Authenticator from the App Store (iPhone) or Google Play Store (Android).
  2. On your computer, go to https://mysignins.microsoft.com/security-info and sign in (use SMS to approve if prompted).
  3. Click + Add sign-in method.
  4. Select Authenticator app and click Add.
  5. On the setup screen, click Next until you see a QR code.
  6. On your new phone, open the Authenticator app and tap + > Work or school account > Scan a QR code.
  7. Point your phone's camera at the QR code on screen.
  8. The account will appear in the Authenticator app. Click Next on the computer.
  9. Approve the test notification that appears on your phone to complete setup.

4. Remove Your Old Phone from MFA

Clean up the old device so it no longer receives prompts.

  1. On the Security info page (https://mysignins.microsoft.com/security-info), find the old Authenticator app entry.
    • It may be listed as Microsoft Authenticator with your old device name, or appear as a duplicate entry.
  2. Click Delete next to the old entry.
  3. Confirm the removal when prompted.
  4. Verify that only your new phone's Authenticator app and your SMS method remain listed.

5. Set Authenticator as Your Default Method (Optional)

Make the Authenticator app your primary sign-in method for the smoothest day-to-day experience.

  1. On the Security info page, click Change next to Default sign-in method.
  2. Select Microsoft Authenticator - notification from the dropdown.
  3. Click Confirm.

Troubleshooting

DANGER

Complete Method 1 (Add SMS) while you still have access to your current phone. If you skip this step and swap phones without a backup method, you will be locked out and will need to contact IT to reset your MFA.

Symptom / ErrorPotential CauseSolution
No "Text a code" option at sign-inSMS not registered as a methodContact IT — they can temporarily reset your MFA so you can re-register.
Verification text never arrivesPhone number not yet active on new deviceWait until your carrier confirms the number transfer is complete, then retry.
QR code won't scanCamera permission deniedOpen phone Settings, find Authenticator, and enable Camera access.
Two Authenticator entries on Security info pageOld device not removedDelete the old entry as described in Method 4.

Last updated:

Frequently asked questions

What if I already wiped my old phone and didn't set up SMS?
If you wiped the old phone and have no backup method, you are locked out. You must call the IT Helpdesk and ask them to manually reset your multi-factor authentication methods.
Can I just use the 'Cloud Backup' feature in Authenticator?
Not on its own, and not for a work account. Microsoft's backup stores only the account name for a work or school account, and you have to sign in again when you restore it — so you still need a verification method that is not on the old phone. Cloud Backup does restore the codes for your personal and third-party accounts, which is worth turning on for those.