How to Move Authenticator Apps to a New Phone

Make an account list

List each service shown in the authenticator app and note its recovery options. The app may support encrypted sync or export, but the rules differ by app and account.

Safe migration sequence

1. Keep the old phone powered and signed in.
2. Update recovery email, trusted number and backup codes for important accounts.
3. Use the authenticator app’s official transfer or sync function if available.
4. For high-value accounts, add the new authenticator from the service’s own security settings.
5. Generate a code on the new phone and complete a test sign-in.
6. Only then remove the old authenticator method.

Watch for duplicates and time errors

Two entries with the same label can cause confusion. Keep device time set automatically, because time-based codes fail if the clock is wrong.

Do not photograph setup QR codes

A setup QR code contains the secret used to generate future codes. Store recovery codes instead, and do not upload QR images to email, cloud photo libraries or messaging chats.

Use an account ledger rather than trusting one export

List every account shown in the authenticator and mark how it will move: app sync, official export, adding a new factor in the service or recovery with a backup code.

• Keep the old phone active until each important service accepts a code from the new phone.
• Check labels carefully so duplicate entries are not confused.
• Set automatic time on both devices before diagnosing rejected time-based codes.
• Remove the old factor from each service only after a successful independent sign-in.

Treat banking, email, domain, cloud and password-manager accounts as high priority. Losing one of those can block recovery for many other services.