Google Authenticator is a straightforward choice if you want codes synced through a Google Account or want to transfer them manually with QR codes. Microsoft Authenticator can back up many third-party TOTP codes, but its restore process is limited to the same platform and some accounts need fresh sign-in. Authy syncs encrypted tokens, but you must keep the backup password. Whichever option you choose, save each service’s recovery codes separately and test sign-ins on the new phone before wiping the old one.
Which authenticator app should you choose?
Choose based on how you want to recover the codes—not just on which app you already use. Google Authenticator offers account sync and manual device-to-device transfer. Microsoft Authenticator has platform-specific backup and restore. Authy uses encrypted backups that depend on a password you set. Apple iCloud Keychain syncs supported passwords and passkeys, but Apple’s guidance does not establish that it backs up TOTP codes inside every separate authenticator app.
As an Amazon Associate I earn from qualifying purchases.
| Option | Backup or transfer method | Main recovery constraint |
|---|---|---|
| Google Authenticator | Sync codes through the Google Account holding them, or export and import by QR code. | Manual transfer needs the old phone. Device-only codes lost with the phone must be re-enrolled service by service. |
| Microsoft Authenticator | Android backup uses a Microsoft personal account; iOS backup uses iCloud features. | Restore must be on the same device type. Some account types require sign-in again. |
| Authy | Encrypted token backups can sync to another Authy installation. | You need the backup password to decrypt tokens; Twilio says it does not store that password. |
| Apple iCloud Keychain | Syncs supported website and app passwords and passkeys among approved Apple devices. | This is not evidence of universal backup for TOTP entries in third-party authenticator apps. |
How to transfer Google Authenticator codes
If the codes are synced to a Google Account, sign into that same account in Google Authenticator on the new device. Google says codes can synchronize across devices this way. If you use the app without a Google Account, codes remain on the device and are not available on other devices. See Google’s Authenticator help.
You can also transfer codes directly, provided the old phone still works:
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- On the old phone, open Google Authenticator and choose Transfer accounts > Export accounts.
- Select the entries to transfer and create the QR code or codes.
- On the new phone, open Google Authenticator and choose Transfer accounts > Import accounts, then scan the QR code or codes shown on the old phone.
- Test the codes by signing in to the services that matter before erasing the old phone.
If device-only codes are lost with the old phone, Google says you must go to each affected service, remove the old authenticator setup, and link a new device. That can make account recovery slow, so enroll another verification method where a service supports it.
What Microsoft Authenticator restores—and what it does not
Microsoft’s backup setup differs by platform. On Android, Cloud Backup uses a Microsoft personal account. On iOS, Microsoft lists iCloud Drive, iCloud Keychain, iCloud Backup, and Authenticator enabled in the Saved to iCloud list as requirements. A backup must be restored on the same device type: Microsoft says an iOS backup cannot be restored on Android. Read Microsoft’s backup instructions and restore guidance.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Third-party TOTP accounts: Entries such as Amazon, Facebook, or Gmail that use one-time password codes restore with their codes.
- Work or school accounts: The account name restores, but you must sign in again.
- Microsoft personal accounts: An account used only for TOTP restores its code. If it also uses passwordless sign-in, only the name is backed up and you must sign in again.
- Passkeys: These are separate from Authenticator backup. Microsoft advises adding and testing a new passkey before removing the old phone.
Microsoft says Android backup is scheduled to move to Google One backup starting in January 2027. Check Microsoft’s phone-transfer guidance if you are planning a migration after that date; the stated change is future-dated, not the current Android backup method.
Free tools Windows power users keep installed
One-click scans. No signup required.
How Authy backup and restore depends on your password
Authy encrypts configured 2FA tokens before synchronizing them. When you enable backups, you set a password used to create the key that decrypts those tokens on another device or Authy installation. Twilio says the password is not sent to or stored on its servers. If you cannot supply it, synchronized tokens may be unusable; account recovery does not reset the backup password.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Before moving phones or reinstalling Authy, enable both Multi-Device and Backups, and make sure you know the current backup password. Follow Twilio’s backup and sync instructions and device-migration guidance. Keep the password somewhere secure and accessible even if the old phone is unavailable.
What iCloud Keychain can—and cannot—back up
Apple says iCloud Keychain keeps supported website and app passwords and passkeys up to date across approved Apple devices. Apple also describes recovery using a recovery contact or iCloud Keychain escrow, subject to account authentication and other conditions. This can help when credentials are stored in Apple’s system, but it does not establish that TOTP codes managed inside every third-party authenticator app are backed up. See Apple’s iCloud Keychain guide.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Keep service recovery codes separate from authenticator backups
Moving an authenticator app does not move the recovery codes generated by the websites or services it protects. Twilio explains that these codes are normally issued by the service, and Authy cannot retrieve or generate them from tokens in the app. Save each service’s recovery codes in a secure place separate from the authenticator backup. See Twilio’s explanation of recovery codes.
Quick Recap
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
A safe checklist before replacing your phone
- Turn on your chosen backup or sync method while the old phone is still available.
- Confirm that you can access the account, cloud service, or backup password needed to restore the codes.
- Save service-generated recovery codes separately from the authenticator app.
- Install and restore the app on the new phone, then test sign-ins for important accounts and resources.
- Keep the old phone until those tests succeed. Microsoft specifically advises keeping it until access to frequently used accounts and resources is confirmed.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
