Getting a new phone is great until you realise your Microsoft Authenticator app did not come with it. If your accounts are protected with multi-factor authentication, you will need to set up the app on your new device before you can log in. Here is how to do it without getting locked out.
Before you get your new phone
If you still have access to your old phone, the easiest approach is to transfer your Authenticator accounts before switching. Open the Microsoft Authenticator app on your old phone, tap the three dots in the top right corner and select Begin recovery. Follow the steps to back up your accounts to your Microsoft account. When you set up Authenticator on your new phone you can restore from that backup.
Setting up Authenticator on your new phone from scratch
Download the Microsoft Authenticator app from the App Store or Google Play on your new phone.
Open a browser on your computer and go to mysignins.microsoft.com. Sign in with your Microsoft 365 account. You may be asked to verify your identity using a backup method such as a text message to your phone number or a code sent to a secondary email address.
Once signed in, go to Security info and click Add sign-in method. Select Authenticator app and follow the steps. You will be shown a QR code on screen. Open the Authenticator app on your new phone, tap Add account and scan the QR code. Your account is now linked to your new phone.
If you are completely locked out
If you cannot get past the sign-in prompt because your old phone is gone and you have no backup method set up, you will need someone with admin access to your Microsoft 365 tenant to remove the MFA requirement temporarily so you can log in and set it up again.
This is a common situation and not something to panic about. If you are a Recloud managed client, contact us and we will get you back in quickly.