Andy Kemp Tools

Recovery

Moving to a new phone

Your work sign-in doesn't move to a new phone by itself. Backing up Authenticator brings your list of accounts across, but you'll need to sign in again and, if you use one, set up a new passkey. Do this while you still have the old phone.

Keep your old phone until you've finished

Don't wipe, trade in or recycle the old phone until you've checked you can sign in to your work apps from the new one.

1. Back up Authenticator on your old phone

iPhone

  1. Turn on iCloudMake sure iCloud Drive, iCloud Keychain and iCloud Backup are on.
  2. Include Authenticator Go to Settings › [your name] › iCloud › Saved to iCloud, find Authenticator and turn it on.

Android

  1. Open Authenticator settingsOpen Authenticator, open the menu and select Settings.
  2. Turn on Cloud Backup Turn on Cloud Backup, choose the personal Microsoft account to store the backup in, and tap OK.

2. Restore on your new phone

  1. Restore the backup Install Authenticator on the new phone and choose to restore from backup, signing in with the same Apple or personal Microsoft account. You can only restore to the same type of phone (iPhone to iPhone, Android to Android).
  2. Sign in to your work account again Your work account appears with a message such as "Sign in to add your account". That's expected — tap the account and sign in to finish setting it up.

3. Set up your passkey on the new phone

A passkey in Authenticator stays on the phone it was created on and isn't part of the backup, so create a new one. A synced passkey in Apple Passwords or Google Password Manager may already be there once you're signed in — check before you remove anything.

  1. Add a passkey Go to Security info, select Add sign-in method, and choose Passkey in Microsoft Authenticator (or Passkey). Use your old phone to approve the sign-in if you're asked.
  2. Test itSign out of a work app and sign back in using the new phone.
  3. Remove the old phone Once the new phone works, go back to Security info and delete the old phone's passkey and Authenticator entry.

Phone-specific settings

Can't add a sign-in method yourself?

Some organisations don't allow self-service set-up. Contact your IT support team and they'll give you the approved way to register your new phone.
Other recovery guides Back to Auth Guide