What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
You can keep using Microsoft Authenticator for personal and third-party accounts after leaving a job, but an app backup will not preserve your access to an employer’s work or school account. Before your work email or company phone is taken away, update the recovery details on personal accounts, set up any permitted replacement work sign-in methods, and transfer eligible codes to a device you control. Keep the old phone until you have confirmed the sign-ins you need work on the new one.
What happens to Microsoft Authenticator when you leave a job?
The app can continue to hold personal Microsoft account entries and eligible one-time-password codes for third-party services. Your employer’s account is different: the organization controls its sign-in requirements and whether your account remains authorized. Keeping the app, or restoring a backup, does not preserve permission to use company systems.
As an Amazon Associate I earn from qualifying purchases.
Microsoft states in its support article Restore one-time password codes in Microsoft Authenticator that “Work or school account credentials are not backed up.” After a restore, a work or school account may appear by name, but you must sign in and register it again if your organization still allows access. A personal passwordless credential also requires you to sign in again. Eligible rotating codes for personal Microsoft and third-party accounts can be restored.
Think of this as two separate tasks: move the personal sign-in methods you are entitled to keep, and follow the employer’s approved process for any work account or device. Do not try to retain or use an employer credential after your authorization ends.
Popular on Amazon
- 【90 Degree Full Function USB C Adapter】Supports the latest USB4 standard for up to 40Gbps of bandwidth, 8K video support, and up to 240W Fast charging; Support USB PD 3.1 Extended Power Range (EPR) including 140W, 180W and 240W. Your productivity is easily doubled. *Warm Tip: For the best fit, please make sure the USB-C port is fully exposed; thick or bulky cases may affect compatibility.
- 【Reliable Quality】Made from high-quality, scratch-resistant aluminum alloy, delicate metal frame. get excellent wear resistance and heat dissipation. Non-Slip Design for easier insertion and removal.
- 【Small and portable】Ultra thin size, ultra compact design, a petite physique that matches the minimalist design of your modern laptops. Coming with a slim figure that won't block the port next to the one it's plugged into.
- 【Compatibility】Widely work with most usb c, thunderbolt 4/3 devices. Compatibilit for ROG Ally, Steam Deck, Switch, MacBook Pro, Quest 3 VR headset, Surface Book 2, iPhone 18/17/16/15, Samsung Galaxy S23/S22/S21, Note 20/10, Google Pixel, ChromeBook, etc.
- 【Excellence Customer Support】If you experience any issues or cable failure, simply reach out to our dedicated customer service team. We provide a prompt response within 18 hours, providing you with the necessary technical support to resolve any concerns.
This distinction matters even if the entries look similar in the app. The app is a place where different kinds of sign-in methods can appear; it is not a single account with one set of permissions. A personal Microsoft account, a third-party service’s rotating code, and a company work account can each have different recovery rules. Decide what each entry is for before you change, remove, or restore anything.
Leaving a job does not automatically disable your personal Microsoft account or third-party accounts. It also does not guarantee continued access to a work account simply because an entry remains visible on your phone. The employer determines when authorization ends, and its policies determine which work sign-in methods are available. Keep personal account recovery and work-account offboarding as separate checklists.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhat should you do before your work email or phone disappears?
Start while you can still unlock the old phone and authenticate to your accounts. Your exact options depend on whether the phone is yours, whether your organization permits self-service changes, and whether you are moving between the same types of devices.
1. Sort the entries in the app
Identify which entries are personal Microsoft accounts, third-party accounts, and work or school accounts. This inventory helps you distinguish codes that may be recoverable through backup from work credentials that need organizational re-registration. Also check whether the phone must be returned; do not assume you can keep using a company-owned device after departure.
For each personal or third-party entry, consider whether you still use the account and how you would sign in if the phone were unavailable. This helps prioritize which codes and recovery methods to test first. For a work entry, note that an entry showing up after restoration is not proof that the employer still authorizes access; if you remain authorized, you may need to sign in and register again under the organization’s rules.
2. Update recovery details on your personal Microsoft account
If your personal Microsoft account uses a work or school email address for verification, replace it with an address you control before that mailbox is disabled. Review the account’s verification email addresses and phone numbers as well. Microsoft warns that losing access to a work or school address used to verify a personal account can prevent you from accessing the personal account.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Do this before relying on that mailbox for a password reset or account check. The important question is not whether the address is listed today, but whether you will be able to receive a verification message there after departure. Add contact details you control, and make sure they are current. Keep access to the recovery account used for Authenticator backup too; otherwise, you may be unable to retrieve the backup on a replacement device.
Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
3. Review work-account methods while still authorized
If your employer still authorizes you to manage the account, open mysignins.microsoft.com/security-info and review the available security information. Add and test a permitted replacement method before losing the old one, if your organization allows it. The administrator may restrict available methods, so use the employer’s approved process rather than assuming every option can be added by the user. Microsoft recommends having three different work-account sign-in methods where possible; that is guidance, not a guarantee that your employer will permit three methods.
Review the methods actually listed for your account instead of planning around a method that may not be allowed. If you can add a replacement, test it while you still have the existing working method and authorization. If the option is absent or registration is blocked, ask IT what process to follow rather than trying to work around the restriction. This preparation is about a permitted transition, not preserving access once the organization ends it.
4. Make a separate plan for passkeys
A passkey saved only on the old phone is not transferred just because you backed up Authenticator. While you can still authenticate, register a replacement passkey through the work account’s Security info page if your organization permits it, then test the new method before removing the old device or passkey. If self-service registration is not available, ask the help desk for the approved procedure. A passkey stored in a synced credential manager might already be available on another device, but verify that it works rather than relying on that assumption.
Free tools Windows power users keep installed
One-click scans. No signup required.
Do not confuse a restored one-time-password code with a passkey. They are different sign-in methods, and the backup process described for eligible rotating codes does not itself move a passkey saved only on the old phone. Treat the passkey as its own transfer task, whether it belongs to a personal account or a work account. For work, any replacement remains subject to the organization’s rules.
How do you move Authenticator to a replacement phone?
Use Microsoft’s backup and restore process for eligible personal and third-party codes, and do not erase or return the old phone until the sign-ins you need have been checked on the replacement. This matters especially if the replacement phone is a different platform: Microsoft’s documented process requires the same device type for backup and restore.
- Confirm access to the recovery account. You will need the same recovery account when restoring. For Android, Microsoft’s current instructions use a personal Microsoft account. For iOS, Microsoft documents backup using iCloud Drive, iCloud Keychain, iCloud Backup, and the Authenticator iCloud toggle. Check that you can access the account or Apple services associated with the backup before starting the move.
- Enable the appropriate backup on the old phone. Follow the backup option for your platform in Authenticator. A backup is not a copy of an employer’s work credential, and it does not transfer a phone-bound passkey. If you are still using the old phone, take the time to confirm that backup is enabled before it is surrendered or wiped.
- Restore before signing in to Authenticator on the new phone. Choose Restore from backup or Begin recovery when prompted, then use the same recovery account used for the backup. Microsoft’s documented process does not support restoring an iOS backup to Android or an Android backup to iOS. If you are switching platforms, do not count on this restore path to carry the codes across; plan how to re-establish each account’s supported sign-in method.
- Complete any required account sign-ins and registrations. Expect to sign in and register work or school accounts again if you remain authorized, and to sign in again for a personal passwordless credential. If work access has ended, contact the former employer’s IT team about any permitted recovery rather than treating the backup as a way to regain access.
- Test important personal sign-ins before retiring the old phone. Confirm that the replacement can provide the codes or other methods needed for the accounts you depend on. Do this before erasing, recycling, or returning the old device. If a method does not work, you still have the old phone available while you work through the account’s supported recovery or re-registration process.
Think of the transfer as incomplete until you have checked the sign-ins you need on the replacement. Seeing an account name after restore is not the same as confirming a working code or successful sign-in. For work accounts, a successful personal backup restore does not change whether your employer permits access. Keep the old phone available until the eligible personal and third-party sign-ins are confirmed and any required work steps have been handled through IT.
Microsoft’s Android backup instructions were checked on October 30, 2026. The support page says the process is scheduled to change starting January 2027, when users will enable Authenticator in Google One backup. That is a future change as of the date checked, not an already-completed transition; confirm Microsoft’s current instructions if setting up backup after that date. The scheduled change concerns the Android backup instructions; it does not alter the separate point that work or school credentials are not backed up.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Also popular on Amazon
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Which option fits if you are returning your phone?
The right approach depends on whether you can keep the old phone long enough to complete a transfer, whether you have a replacement, and which accounts you need to preserve. None of these options preserves employer authorization by itself.
| Option | Useful when | What it preserves or requires | Main limitation |
|---|---|---|---|
| Keep using the existing phone | You own the phone and can keep it | No purchase or immediate transfer; keep working recovery methods available | Does not preserve work-account authorization, and continued access depends on retaining the phone |
| Back up and restore to a replacement phone | You need to move eligible personal or third-party rotating codes | Requires the same device type for Microsoft’s documented restore process and access to the recovery account | Work credentials and phone-bound passkeys need separate registration |
| Add a physical security key | You want an additional independent sign-in method and the account supports it | May be usable with a personal Microsoft account or a work account that permits the relevant hardware method | It must be registered and tested in advance; it is not an Authenticator backup or a way around account deactivation |
Microsoft identifies physical security keys as an option for passwordless sign-in on personal accounts and describes hardware methods for work accounts only where the organization allows them. Check account compatibility and employer policy before relying on a key; buying one alone does not add it to an account.
Each option solves a different problem. Keeping a phone avoids an immediate transfer, but only makes sense if you own it and can keep it; it does not create a fallback if you later lose that device. A backup and replacement phone can move eligible rotating codes, but it depends on the backup account, platform compatibility, and time to test the restore. A physical key may provide an additional method for a compatible account, but it must be registered in advance and cannot reverse an employer’s access decision.
There is no universally best choice. If you must hand back a company phone, prioritize updating personal account recovery details and moving eligible codes to a device you control before the hand-back. If you already own and will keep the phone, you may not need an immediate replacement, but make sure the personal recovery methods do not depend on a work email or a device you are about to lose. A security key is an optional additional method, not a substitute for the backup or account-specific registration steps.
Recommended Free Tools
Choose any physical key only after checking whether the relevant account supports it and, for a work account, whether your organization permits it. The sources here do not verify a particular model or price, so compare supported compatibility and the organization’s policy rather than assuming that any key will work. A purchase alone does not register a key or preserve work access.
What should you avoid doing?
Do not treat a successful backup as proof that every entry or credential can be recovered. In particular, avoid these mistakes:
- Do not wait until the old phone is gone. Set up the backup and any permitted replacement methods while you can still authenticate with the old device.
- Do not rely on an old work email for personal-account recovery. Change the verification details on the personal account before losing the mailbox.
- Do not assume backup transfers work credentials or phone-bound passkeys. Those need separate sign-in or registration steps, subject to employer policy.
- Do not remove entries or clear app data as a shortcut. Removing an entry prevents that device from verifying its sign-ins, and clearing app data removes all entries without an undo option. Confirm the personal entries and replacement sign-ins first.
- Do not use a work account after authorization ends. For access or recovery questions after departure, contact the former employer’s IT team and follow its instructions.
Be especially careful when cleaning up the app after a restore. An old work entry, a visible account name, or an entry you no longer recognize is not by itself a reason to clear all app data. Removing an entry affects that device’s ability to verify sign-ins for it, and clearing app data removes every entry without an undo option. First confirm the personal entries you need and test replacement sign-ins. For an obsolete work entry, follow employer guidance and avoid removing it if doing so could interfere with an authorized sign-in you still need.
Also popular on Amazon
- Portable and powerful USB-C HUB: BENFEI USB Type-C HUB, with super-soft and knot-free silicone woven design cable, meets most mobile office needs. Compact, lightweight, stylish, and powerful portable USB C Hub equipped with 1 x HDMI port, 1 x 100W charging, and 3 x USB ports. 18-month warranty, 24-hour response, to ensure you feel at ease when using our product.
- Design centered on comfort and reliability: Thanks to BENFEI's end-to-end in-house cable production capability, in-house PCBA and assembly capability, using the industry's most advanced silicone woven design and process, 20cm cable in length, no knots, super-soft, the HUB is easy to use in all scenarios: laptop, tablet, stand etc. Super-soft, 25000+ life cycles, to meet your daily carrying and office needs.
- 100W Charging: Support up to 90W USB C pass-through charging via Type-C port to keep your laptop powered. 10W is reserved for other interface operations. No data and video function on the Type-C port.
- 4K HDMI Display: The HDMI port supports media display at resolutions up to 4K 30Hz, keeping every incredible moment detailed and ultra vivid. Please note that the C port of the Host device needs to support video output.
- Transfer Files in Seconds: Transfer files and from your laptop at speeds up to 10 Gbps with USB A 3.2 port. Extra 2 USB A 2.0 ports are perfectly for your keyboards and mouse.
What if you are already locked out of the work account?
Contact the organization’s IT administrator or help desk. Authenticator backup does not restore a work credential, and an employer may control which recovery methods are available. The administrator can tell you whether any access or recovery process remains permitted; do not try to work around a disabled account.
If the lockout concerns a personal Microsoft account instead, use the personal account’s recovery methods and make sure its verification details are ones you control. The work account’s status and the personal account’s recovery are separate matters, even if the same Authenticator app displayed both.
If you are still employed or otherwise authorized but cannot use the listed work method, report the problem through the organization’s approved support channel. If your employment has ended, ask the former employer whether any recovery or access is permitted; do not assume that a backup, a security key you bought, or a remaining app entry can restore a disabled account. For a personal account, start with its own recovery options and verify that the contact details are not tied solely to an inaccessible work mailbox.
Frequently Asked Questions
Can I keep Microsoft Authenticator on my personal phone after I leave?
The app can remain on a phone you own for personal and third-party sign-ins. Whether you may keep a work account or device is a separate question governed by your former employer’s access and device policies.
Can I use my work email to recover a personal Microsoft account later?
Only if you can still access that mailbox when Microsoft asks you to verify the account. Because a departing employee may lose that access, set a personal email address or phone number you control as a verification method before departure.
Will restoring Authenticator move a passkey to my new phone?
Not if the passkey was saved only on the old phone: Authenticator backup does not transfer it. A passkey stored in a synced credential manager might be available on the replacement, but check it before relying on it.
Does a security key let me back into a disabled work account?
No. A security key is an additional sign-in method only when it has been registered and the account supports it. It does not override an employer’s decision to end access.
Also popular on Amazon
- 【Read before You Buy】 Note: This adapter is USB 2.0 version and cannot transmit HDM, VGA, or other video signals. Nevertheless, they are fully capable of charging devices,duplicating files, and can be seamlessly integrated with USB-C earphones, wireless network adapters, and SD card adapters.
- 【Easy to Use and Safe】Thanks to modern manufacturing techniques, we've made these adapters sufficiently compact so that they can remain inserted in your device without noticeable protrusion or inconvenience. This means you don't have to constantly plug and unplug them, reducing the likelihood of wear and misalignment, and making them more convenient to carry around.
- 【Reliable Quality】Engineered for enhanced durability, durable aluminum alloy shell material,get excellent wear resistance and heat dissipation,the male USB C and female USB connectors & the male USB and female USB C connectors are designed to be plugged and unplugged up to 20000 times. Provides data transfer, device charging, memory space expansion, and additional computer peripherals.
- 【Think more for you】Do you need to connect a USB-C-enabled device to an odd device that only has USB-A ports? Then these USB-A male to USB-C female adapters are made for you.Simply insert the adapter into the USB-A port on the device, and you can instantly connect your USB-C device to the device that originally didn't have the correct connection port.
- 【Trusted xiwxi Quality and Service】As a responsible brand seller, you will receive xiwxi's 12-month Quality assurance and lifetime friendly customer service, you're not just buying a product,you're investing in peace of mind with all-round quality and exceptional customer service.
Does Authenticator backup save my work account?
No. Microsoft says work or school account credentials are not backed up. The account may appear by name after restore, but if you remain authorized you must sign in and register it again; if access has ended, contact the former employer’s IT team.
How do I move Authenticator to my new phone?
Enable the appropriate backup on the old phone, keep access to the recovery account, and choose Restore from backup or Begin recovery on the new phone before signing in. Microsoft’s documented restore process requires the same device type, and you should test the sign-ins you need before erasing or returning the old phone.
Can I restore an iPhone Authenticator backup to Android, or the reverse?
No. Microsoft’s documented process does not support restoring an iOS backup to Android or an Android backup to iOS. Plan to re-establish sign-in methods for accounts that cannot move through that restore process.
What if I have already returned or erased my work phone?
For personal accounts, use the account’s supported recovery methods and any backup you can access. For a work account, contact the former employer’s IT administrator about any permitted recovery; Authenticator backup does not restore the work credential.
Do I need to remove the work entry from Authenticator after leaving?
Not necessarily as an immediate cleanup step. Follow your former employer’s instructions, and do not remove entries or clear app data until you have confirmed the personal entries and replacement sign-ins you need. Removing an entry prevents that device from verifying its sign-ins; clearing app data removes all entries without undo.
Is a physical security key a replacement for Authenticator backup?
No. It can be an additional sign-in method for a compatible personal account and may be available for a work account if the organization allows it. Register and test it in advance; it does not back up Authenticator codes or restore a disabled work account.
The Bottom Line
Before leaving, separate personal sign-ins from work access: update personal recovery contacts, back up eligible codes using the correct platform process, and test the replacement device before surrendering or erasing the old one. Work credentials and phone-bound passkeys need separate, employer-approved registration, and no app backup or security key preserves authorization after the organization ends it.
