How to get Microsoft Authenticator working on a new device

Part of the security of multi-factor authentication apps is that they only work on the hardware you set them up on. This prevents someone from taking a backup of or cloning your device and having access to your multi-factor account.

Because of this, if you get a new phone there are steps you need to perform to get the app working on it. 

1. From a computer, go to https://aka.ms/MFASetup.
2. Log in with your work email address and password.

3. You will be prompted to approve the sign-in request. If you still have access to your old phone and it still has the app installed on it, you should have the notification on that phone and can approve it there. Otherwise, click I can't use my Microsoft Authenticator app right now.

   

4. Choose the option to text a code to your phone. If you no longer have access to the listed phone number (for example, you changed your phone number when you got the new phone) you will need to contact help@christmanco.com in order continue.)

   

5. Once you've received the text on your phone, enter the code and click the Verify button. If you're asked if you want to stay signed in, just click No (especially if you're not doing this on your own computer).
6. You'll be taken to your account's Security Info page. There you'll see the various sign-in methods you've authorized on your account. Generally, this will include Phone, Microsoft Authenticator, and Email.

7. Click the Delete link for Microsoft Authenticator. This will de-authorize your old phone from your account.

   
   

   

8. On your new phone, open the Microsoft Authenticator app. If you don't have the app installed, please do so from the app store. Make sure it is the Microsoft Authenticator app, and has this icon:

   

   If you're installing the app fresh, you can skip to step 14.

9. Tap on your TCC account.
10. Tap on the gear icon in the upper-right corner.
11. Tap Remove account.
12. Tap Remove account again to confirm (if prompted).
13. If prompted to remove the account from this app or from all apps on the device, choose all apps on the device.
14. Back on your computer, click on Add sign-in method (which should be just above Phone).

15. Select Authenticator app from the drop-down list and click Add.

    
    

    

16. Click Next.

17. On your phone, tap the option to add an account (such as the + icon at the top of the app, or a big Add account button on the main screen).

    
    

    

18. Select Work or school account.

    
    

    

19. Select Scan a QR code.
20. On your computer, click Next and you'll be given a QR code to scan.
21. Aim your phone's camera at the QR code on your screen and it will quickly scan it.
22. Once the scan is complete, click Next on the computer.

23. A test authentication request will be sent to your phone. Approve it.

    
    

    

24. Click Next on your computer.
25. Congrats! Your Microsoft Authenticator app is functioning again on your phone. Now we need to set it as the default sign-in method again. Back on the Security info page on the computer, click Set default sign-in method.

26. Select App based authentication - notification and click Confirm. This will reset your default authentication to be the authenticator app again.