MFA & Verification Issues

Fix Microsoft Authenticator Screen Lock Changed Error After Phone Recovery

Maira Mehtab Sep 20, 2026 868 views

Question details

Users are unable to use passwordless sign-in due to a screen lock changed error after migrating their Authenticator app to a new smartphone.

Product: Microsoft Authenticator
Device & OS: Android (Samsung, Motorola, Pixel, Huawei)
Scenario: Attempting to use passwordless sign-in (two-digit number matching) after restoring the Microsoft Authenticator app from a cloud backup on a newly purchased device.
Observed behavior: The passwordless sign-in fails repeatedly with a "Your screen lock has changed" prompt, even though standard 6- or 8-digit numeric verification codes may still function properly.

Before you start

Ensure your new device's screen lock (PIN, biometric, or pattern) is fully configured and that your phone's operating system is completely updated before attempting these fixes.

Solution 1Recommended

Remove and Re-register Your Account

The most effective way to clear the hardware-linked screen lock error is to delete the migrated account from the Authenticator app and add it back manually.

Because passwordless sign-in relies on cryptographic keys tied directly to your specific device's hardware lock screen, restoring a cloud backup to new hardware breaks this connection.

Remove the broken account

Open the Microsoft Authenticator app on your new phone, tap on the account displaying the error, select the settings gear or menu icon, and tap 'Remove account'.

Access security settings online

On a computer or separate web browser, log in to your Microsoft account and navigate to the 'Security' dashboard, then select 'Advanced security options'.

Remove old devices

Find the old sign-in method associated with your previous phone in the list and remove it to prevent conflicts.

Re-register the new device

Click 'Add a new way to sign in or verify', choose the Authenticator app, and scan the provided QR code with your new phone's Authenticator app to establish a fresh, working connection.

Solution 2

Switch to Password and Numeric Verification Code

Bypass the passwordless sign-in failure by falling back on traditional two-factor authentication using your password and a timed code.

Free Microsoft Office alternative

Need a Hassle-Free Office Suite? Try WPS Office

While you troubleshoot Microsoft account access and authentication issues, you can continue your work without interruption. WPS Office is a lightweight, fully compatible, and free alternative to Microsoft Office that doesn't require complicated cloud sign-ins to start viewing and editing your documents locally.

1. Download the software: Visit the official WPS Office website and download the installation file for your operating system.
2. Install WPS Office: Run the installer and follow the simple on-screen instructions to complete the setup in minutes.
3. Open existing files: Double-click any existing Microsoft Office document on your computer to open, edit, and save it instantly without needing to pass an authenticator check.

100% compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).No mandatory account sign-in required to perform basic offline editing.Lightweight installation that runs smoothly on Windows, Mac, Linux, iOS, and Android.Familiar tabbed interface allows a seamless transition from Microsoft Office.

Frequently Asked Questions

Why does Microsoft Authenticator say my screen lock changed on a new phone?

When you restore Microsoft Authenticator from a cloud backup onto a new device, the app's security tokens no longer match the hardware-backed screen lock of the new phone. This mismatch triggers a security alert during passwordless sign-ins.

Do standard numeric verification codes still work when this error happens?

Yes, in most cases, standard 6-digit or 8-digit time-based verification codes continue to work perfectly. Only the two-digit passwordless notification approval process is blocked by the screen lock error.

Can I fix this without removing my account from the Authenticator app?

Typically, no. Because the cryptographic keys for passwordless sign-in are tied to the specific hardware of your old phone's lock screen, you must remove the account and re-register it to generate new, valid keys for the new device.

Does this issue only affect specific Android brands like Samsung or Motorola?

No, this issue has been reported across various Android hardware migrations, including transfers between Samsung, Motorola, Huawei, and Google Pixel devices. It is a general Android hardware-security limitation regarding cloud backups.

Login & Account Issues