Fix Microsoft Authenticator Not Generating Codes After Phone Replacement
Question details
The user is unable to generate six-digit verification codes using Microsoft Authenticator on a new device to access their work account and VPN.

- Product
- Microsoft Authenticator / Microsoft 365
- Device & OS
- not provided
- Scenario
- Setting up access to work accounts and VPN services after replacing a lost or stolen phone.
- Observed behavior
- The Microsoft Authenticator app is installed on the new phone, but it fails to generate the required six-digit MFA codes for the work account.
Ensure you have the contact details for your company's IT helpdesk or Microsoft 365 administrator, as resolving work account MFA issues requires administrative privileges.
Contact Your Microsoft 365 Administrator to Reset MFA Registration
Because the Authenticator app is tied to specific device hardware for security purposes, replacing a phone requires an administrator to clear the old device's registration before you can generate codes on the new one.
For corporate and educational environments, multifactor authentication (MFA) tokens are hardware-bound. Simply installing the app and signing in on a new phone will not automatically transfer the ability to generate six-digit codes for work accounts.
Reach out to your organization's Microsoft 365 administrator or IT support team and explain that you have replaced your device.
Ask the administrator to remove your old Authenticator registration from the Azure Active Directory and require a re-registration for multifactor authentication on your account.
Once the administrator confirms the reset, attempt to log into your Microsoft 365 work account on a desktop web browser.
Follow the on-screen prompts during login to add the new device to Microsoft Authenticator by scanning the provided QR code with your new phone.

Recover Personal Accounts Using Cloud Backup
If your Authenticator issue also affects personal Microsoft accounts and you had cloud backup enabled on your old device, you can use the recovery feature to restore access.
Need to Access Documents Without Microsoft 365? Try WPS Office
While waiting for your IT administrator to reset your Microsoft Authenticator access, you might be blocked from opening Microsoft 365 apps. You can use WPS Office to view, edit, and manage your local work documents without needing an immediate account login. WPS Office is a free, lightweight, and user-friendly alternative.
- 1. Download WPS Office: Visit the official WPS website to download and install the free WPS Office suite on your computer.
- 2. Open Your Local Files: Launch WPS Office, click on 'Open', and navigate to the locally saved Word, Excel, or PowerPoint documents you need to work on.
- 3. Edit and Save: Edit your documents normally and save them in their original formats so they remain perfectly formatted for your colleagues.

Frequently Asked Questions
Why didn't my work account automatically transfer to my new phone's Authenticator app?
For security reasons, Microsoft Authenticator creates a hardware-bound security token for corporate accounts. When you switch to a new phone, the old token becomes invalid, and your organization's IT administrator must clear the old registration so a new token can be generated.
Can I use Microsoft Authenticator on two different phones at the same time?
Yes, you can configure the Authenticator app on multiple devices. However, each device must be registered individually by scanning a QR code or logging in. Keep in mind that your organization's IT policies may limit the number of devices you are allowed to enroll for work accounts.
What should I do if I cannot reach my Microsoft 365 IT administrator?
If you do not have direct contact information for your Microsoft 365 administrator, you should reach out to your company's general IT helpdesk, technical support channel, or HR department to have your MFA reset request routed to the correct personnel.




