Quick Answer
If your two-factor authentication stopped working after switching phones, the most likely reason is that your authentication app didn't carry over to the new device. You can regain access by using backup codes, a fallback login option, or transferring your 2FA app data. For a related guide, see Lost Your Phone? How to Find, Lock, and Erase It Remotely.
Why 2FA Stops Working on a New Phone
Two-factor authentication relies on a second device or app to verify your identity. When you get a new phone, that link breaks until you re-establish it. The most common causes are:
- Your authenticator app wasn't transferred. Apps like Google Authenticator didn't back up your codes unless you manually moved them. Others, like Authy or 1Password, may support cloud sync but require you to sign in on the new phone.
- You didn't save your recovery codes. Most services generate one-time backup codes when you enable 2FA. If you skipped this step, you lose your safety net.
- Your phone number changed or isn't active. If you use SMS-based 2FA and your new phone has a different number, text codes won't reach you.
- Time sync issues. Authenticator apps generate codes based on the current time. If your new phone's clock is off, codes won't match what the service expects.
How to Recover Access Right Now
1. Use Your Backup or Recovery Codes
When you first set up two-factor authentication, most services give you a set of one-time recovery codes. These bypass 2FA entirely and let you log back in.
- Check your email, password manager, or a saved note for the recovery codes you stored when setting up 2FA.
- On the login screen, look for an option like "Try another way" or "Use backup code."
- Enter one of the codes. It works once and then becomes invalid.
If you never saved these codes, skip to the next method.
2. Use a Fallback Login Option
Many services offer alternative ways to verify your identity when 2FA fails:
- Email-based codes: A one-time code sent to your registered email address.
- Backup phone numbers: Some services let you register a second number for SMS codes.
- Security keys: If you use a physical key like a YubiKey, plug it in or tap it during login.
- App passwords: Services like Google and Microsoft let you generate app-specific passwords that skip 2FA for older apps.
Look for "Need help?" or "Can't access your authenticator?" on the 2FA screen. That link usually leads to these alternatives.
3. Transfer Your Authenticator App
If your old phone is still available, move your 2FA accounts to the new device before locking yourself out for good.
Google Authenticator (Android):
- On your old phone, open Google Authenticator and tap the three-dot menu.
- Select Transfer accounts and choose Export accounts.
- On your new phone, install Google Authenticator and tap Import accounts.
- Scan the QR code shown on the old phone to complete the transfer.
Google Authenticator (iPhone to iPhone):
- On your old iPhone, go to Settings and find the Google Authenticator app.
- Tap Transfer Accounts and follow the prompts.
- Scan the QR code on the new iPhone using the same app.
Authy:
- Open Authy on your old phone and go to Settings.
- Enable Backup with Password or iCloud/Google Drive backup if not already active.
- Install Authy on your new phone, sign in with your phone number, and enter your backup password.
- Restore your accounts from the cloud backup.
Microsoft Authenticator:
- Open the app on your old device, go to Settings, and tap Accounts.
- Select Backup and tap Back up to save to your Microsoft account or iCloud.
- On your new phone, install Microsoft Authenticator, sign in, and choose Restore.
4. Fix the Time Sync Problem
If your authenticator app shows codes but they're rejected, your phone's clock may be off. This is common on new phones that haven't fully synced.
- Go to your phone's Settings and open Date & Time.
- Turn on Automatic date and time (Android) or Set Automatically (iPhone).
- Restart the authenticator app and try the code again.
If You Can't Use Any of the Above
When backup codes are unavailable and you can't transfer your app, you'll need to contact the service directly. This is a last resort, but it works.
- Go to the service's account recovery page (usually linked on the login or security settings page).
- Look for options like "I lost my phone" or "I can't use my authenticator."
- Verify your identity using whatever the service accepts: email, phone, answering security questions, or uploading a photo ID.
- Once verified, disable 2FA temporarily and re-enable it on your new phone.
Expect delays. Some services take 24 to 72 hours to process recovery requests.
Preventing This Problem Next Time
Before switching phones again, take these steps so you don't get locked out:
- Save your recovery codes in a secure location. A password manager, a printed copy in a safe place, or an encrypted file works. Don't screenshot them in an unprotected gallery.
- Use an authenticator app with cloud backup. Authy and 1Password handle this natively. Google Authenticator added transfer support, but cloud backup is still limited on some platforms.
- Transfer your 2FA before wiping or selling your old phone. Do this while you still have access to both devices.
- Register a backup phone number or email with each service that supports it.
When to Get Help
Contact the service's support team if none of the recovery methods work, your account is locked, or you suspect unauthorized access. Most major services have account recovery forms accessible without logging in. If you use a work or school account, reach out to your IT department—they often have admin tools to bypass 2FA recovery.
Bottom Line
Getting locked out of your own accounts because 2FA broke on a new phone is stressful, but it's fixable. Recovery codes and fallback options are your fastest path back in. If those aren't available, transferring your authenticator app or contacting the service directly will get you sorted. Going forward, always save your backup codes and use an app that syncs across devices.