If your authenticator app fails on a new phone, restore from cloud or backup, rescan site QR codes, and sync device time to get valid codes again.
Quick aim: get back into accounts without losing two-factor protection. This guide starts with fast checks, then moves into safe recovery paths for Google, Microsoft, Authy, and other apps.
Authenticator App Not Working On New Phone Fast Checks
When you see “invalid code” or the code field keeps spinning, it usually points to one of a few simple causes. Start with these checks before you try account recovery.
- Confirm You’re On The Same Account — On the new phone, sign in to the same Apple ID or Google account your old authenticator used for backup or sync.
- Turn On Automatic Date & Time — Open system settings and enable network time. Codes fail if the device clock drifts even by seconds.
- Update The App — Install the latest version of your authenticator from the official store. Old builds can misread time or block camera transfer.
- Check Camera And Internet — You need a camera for QR transfer and a steady link for cloud restore and push approvals.
- Try A Fresh Code Window — Wait for the code to roll to the next 30-second window, then enter it right away.
Many readers search for “authenticator app not working on new phone” when the fix is as small as time sync or an account mismatch. If the quick list doesn’t help, move to the step-by-step paths below.
Fixing An Authenticator App On A New Phone: What Works
Two routes: restore what you had, or reconnect accounts one by one. Pick the route that matches your app.
Cloud Restore Route (If Your App Supports It)
- Enable Backup On The Old Phone — If you still have it, open the authenticator and turn on cloud backup or sync. Sign in with the same profile on both phones.
- Install And Sign In On The New Phone — Open the app, choose restore or sync, and let it download your tokens.
- Verify A Code — Test at least one site. If codes still fail, recheck automatic time and repeat the restore.
Transfer By QR Route (No Cloud Available)
- Open Transfer On The Old Phone — Use the app’s “export accounts,” “transfer accounts,” or “move to another device” option.
- Scan On The New Phone — In the authenticator, choose import or scan a transfer QR. Keep both screens bright and steady.
- Finish With A Code Test — Log in to one site and confirm the new phone’s code works before wiping the old device.
Manual Reconnect Route (No Access To The Old Phone)
- Use Backup Codes — Most sites give printable codes during setup. One code gets you in so you can add the new device.
- Switch To A Temporary Method — Turn on SMS or email codes briefly so you can sign in and re-add the authenticator.
- Disable And Re-Enable 2FA — As a last resort, turn off two-step on the site after verifying your identity, then set it up again on the new phone.
Compatibility note: moving from iOS to Android or the other way does not break TOTP itself. The code standard is open. What changes is how each app backs up the secret keys and how it links to your cloud identity. When in doubt, finish a QR transfer while both phones are in hand.
Security note: never email screenshots of QR codes or store them in plain cloud folders. Those QR codes contain the secret that generates your tokens. Treat them with the same care as a password manager export.
Work Accounts And SSO Quirks
Some companies bind sign-in to device management. If your new phone is not enrolled, push prompts may never arrive. Enroll the device in your employer’s management app, confirm compliance, and ask IT to set the new phone as the default 2FA device. For services that use number matching or sign-in approvals, open the authenticator and approve the prompt there rather than waiting for a system notification.
Banking sites: many banks lock transfers to in-app 2FA. Look for “replace authenticator” inside the security center while signed in with a backup method. Some banks may require a support call to move the token; bring ID and a recent statement.
Extra Tips For Clean Transfers
- Keep Both Phones Charged — Set brightness high, disable auto-rotate, and keep screens awake during QR export.
- Move Critical Accounts First — Start with email, cloud storage, and your main password manager so recovery stays easy.
- Audit As You Go — After each batch of transfers, cross out entries on a written list so nothing gets missed.
If You Changed Your Phone Number
Auth apps don’t rely on your SIM, so codes remain valid. The trouble shows up when a site sends an SMS challenge during recovery. Update your number in each account as soon as you sign in, and add a second factor that does not depend on your carrier.
Authenticator App Not Working On New Phone Causes
It helps to map the common failure points so you can pick the right fix and avoid a lockout.
- Time Drift — TOTP codes depend on your phone clock. If the clock is off, codes won’t match the server.
- Account Sync Gaps — You signed into a different platform account on the new device, so the app can’t fetch your tokens.
- Token Not Migrated — Tokens stayed on the old phone because backup wasn’t enabled and no transfer was done.
- Push Prompt Stuck — Some services use push approvals. If the old device still receives them, move the prompt to the new one inside account security settings.
- Camera Or QR Issues — Low light, reflections, or screen protectors can stop the transfer QR from scanning.
- App Data Cleared — A new device restore from a bare backup may install the app without the tokens.
Step-By-Step Fixes By Popular Authenticator
Different apps, same goal: regain valid codes with the least friction. Here’s a quick table you can follow before the deeper steps.
| App | Move Method | What You Need |
|---|---|---|
| Google Authenticator | Export/Import by QR; optional Google cloud sync | Old phone for QR or a Google account for sync |
| Microsoft Authenticator | Cloud backup/restore; passwordless and push move inside account | Microsoft account signed in on both phones |
| Authy | Multi-device + cloud; approve new device then sync | Existing device approval or account recovery |
Google Authenticator
- Try Cloud Sync First — Sign into the same Google profile in the app and choose Sync to Google if offered.
- Use Transfer Accounts — On the old phone, open Transfer Accounts and export. On the new phone, import by scanning the QR.
- Retire The Old Device — After codes work, remove the old phone from your 2-step settings on major sites.
Microsoft Authenticator
- Turn On Cloud Backup — On the old device, enable backup. On the new phone, sign in and restore.
- Fix Passwordless And Push — For Microsoft accounts, open the account security page and set the new phone as the default sign-in method.
- Test Third-Party Accounts — Some entries may need re-adding. Scan their site QR codes if a code fails.
Authy
- Approve The New Device — On an existing device, enable multi-device, then approve the new phone.
- Sync Tokens — After approval, open Accounts and tap Sync. If you no longer have any device, start account recovery.
- Lock It Back Down — Turn off multi-device if you prefer a single trusted phone.
Account Recovery Without The Old Phone
No old device? You can still get back in safely. Work through this list from low friction to high friction.
- Use Backup Codes — Enter one saved code to pass 2FA, then add the new phone inside security settings.
- Try A Saved Second Method — If you had SMS, email, a hardware key, or push set up, use that to sign in.
- Start The Site’s Recovery Flow — Most services let you verify identity with ID questions, prior devices, or support tickets.
- Contact Support With Proof — Have IDs, last four digits of a card on file, recent transaction IDs, or prior login IPs ready.
During recovery, never delete the authenticator app entry on the site unless support tells you to. That step can remove safeguards that the team uses to confirm your identity.
When Codes Are Wrong Or Expired
Code still fails? These fixes target the common timing and format issues that block otherwise valid tokens.
- Resync Time — Turn automatic time on, set the correct region, and restart the phone. Some apps include a “time correction for codes” button.
- Confirm TOTP, Not HOTP — Most sites use time-based codes. If a site gave you a counter-based seed, press refresh only when asked.
- Remove Duplicates — If you added the same site twice, delete the stale entry so you don’t read the wrong code.
- Re-scan The QR — If a vendor rotated the secret, old tokens stop working. Add the account again from its security page.
- Check For App Lock — Some authenticators lock after too many failed attempts. Unlock with device biometrics and try again.
Time correction tools: some authenticators include a built-in time drift fixer. Open app settings and look for a “time correction for codes” or “sync time” control. Run it once, then try a fresh 30-second window. If the fix doesn’t stick after a reboot, toggle automatic time off and on to force a resync with the carrier or Wi-Fi network.
Hardware keys as a safety net: adding a pair of FIDO2 security keys reduces pressure during phone swaps. Keep one there and one in a drawer. Many major sites let you keep both a key and an authenticator active. If your phone fails, tap the key and sign in while you repair the app.
Password manager assist: several managers can store TOTP seeds alongside passwords. This keeps the secret with your login, and it can autofill both the password and the code.
Prevent This Next Time
Make future moves easy: set a simple safety net while everything works.
- Enable Cloud Backup Or Export — Turn on the built-in backup or export transfer codes and store them securely.
- Print Backup Codes — For every critical site, download or print the one-time codes and keep them offline.
- Add A Second Method — A hardware key, a second authenticator, or SMS as a backup helps during phone swaps.
- Keep The Old Phone Until You Test — Don’t wipe it until you’ve logged in everywhere with the new device.
- Name Your Entries — Label accounts in the app so you can spot duplicates and expired entries fast.
Readers often type “authenticator app not working on new phone” after a rushed upgrade. A short pause to enable backup, print codes, and add a second method prevents the scramble the next time you change devices.
