Microsoft Authenticator iPhone backup

by | Feb 7, 2026

Backup Microsoft Authenticator credentials to iCloud

iPhone users can use Microsoft Authenticator iPhone Backup utility to save Microsoft 365 credentials to their iCloud account.

Using Microsoft Authenticator iPhone Backup, you can restore your existing 365 MFA credentials to a new iPhone. Also, you can restore your MFA account if your iPhone’s working MFA settings are corrupted. If you are a 365 tenancy owner or a Global Administrator (GA) ou would need another global administrator (GA) to create new credentials. Without a second GA (see this article about creating a secondary “break-glass” Global Administrator) a Microsoft 365 tenancy owner could lock themselves out of their tenancy. So, backing up 365 Authenticator settings is critically important if you are a tenancy owner.

This article explains how to configure your handset, iCloud, and Microsoft Authenticator iPhone Backup.

Click open the headers below to learn more about Microsoft Authenticator iPhone Backup. Support options are available for professional assistance. You can return to our Index of Articles by clicking here.

How Microsoft Authenticator iPhone Backup Works

On an iPhone, Microsoft Authenticator does not use a Microsoft account for backup. Instead, Microsoft Authenticator relies entirely on Apple iCloud.

There is no backup button inside the app in Microsoft’s version of Microsoft Authenticator for iPhone. Instead, once your iPhone is set up correctly, your MFA settings are synchronised and periodically checked in iCloud and iCloud keychain in the background.

The key requirement is that your iPhone is:

  • Signed in to your Apple ID
  • Using iCloud
  • Using iCloud Keychain

If those conditions are met, Microsoft Authenticator iPhone backup is already working. Click open the next sections to learn how to set up your iPhone.

Important note about your Apple ID – your Apple ID, like a Google, Microsoft (personal) and a Microsoft 365 account – is what is called a sovereign account. Be sure that sovereign accounts are configured with secondary sign-in alternatives, and be sure to verify your record and review your user account contact preferences no less than annually.

Step‑by‑Step: Enabling Microsoft Authenticator iPhone Backup

These steps take about two minutes and only need to be done once. Please read through the workflow before you begin. Also, bear in mind that Microsoft and Apple can change processes from time to time and the workflow may vary depending on your iOS version and iPhone model. In any event, the objective is to enable iCloud, iCloud keychain, and enable iPhone to execute connectivity for Microsoft Authenticator.

1. Confirm You Are Signed In to Your Apple ID

  1. Open iPhone Settings
  2. Look at the very top of the screen
    1. If you see your name, then you are signed in
    2. If not, sign in with your Apple ID

Microsoft Authenticator iPhone backup needs to be associated with your Apple ID, so this step is essential.

2. Make Sure iCloud Is Turned On

  1. Open Settings
  2. Tap your name
  3. Tap iCloud
  4. Ensure iCloud is switched ON

Without connectivity to iCloud, Authenticator cannot backup your credentials.

3. Turn On iCloud Keychain (Most Important Step)

  1. Go to Settings → your name → iCloud
  2. Tap Passwords & Keychain
  3. Turn iCloud Keychain ON

iCloud Keychain securely stores your 365 MFA settings so that they can be retreived later. If you store Microsoft Authenticator credentials for other services, you can back these up too.

4. Allow Microsoft Authenticator to Use iCloud

  1. Go to Settings → your name → iCloud
  2. Tap Show All
  3. Ensure Microsoft Authenticator is switched ON

If Microsoft Authenticator is turned OFF, Microsoft Authenticator iPhone backup will not work. So, be sure to check this setting.

Using Microsoft Authenticator Day to Day

Once these settings are in place, you can use Microsoft Authenticator normally:

  • Add your Microsoft work account if 365 MFA is not already configured
  • Add any other supported accounts
  • Approve sign‑ins as usual

There is nothing else to manage. On an iPhone, backup happens automatically in the background.

What Happens When You Get a New iPhone?

If your phone is lost, damaged, or replaced, restoring Microsoft Authenticator is straightforward:

  1. Sign in to the same Apple ID on the new iPhone
  2. Turn on iCloud and iCloud Keychain
  3. Install Microsoft Authenticator from the App Store
  4. Open the app

Your Microsoft Authenticator accounts/credentials will reappear automatically. You may be asked to sign in again to some services, but the Authenticator entries themselves are restored. This is why Microsoft Authenticator iPhone backup is so important to set up early.

Hot Tip: Microsoft Authenticator requires iOS 16 or later to work. If Microsoft Authenticator is not available in your App Store inventory, it is usually because your iPhone does not support minimum hardware/software requirements.

Common Questions About Microsoft Authenticator iPhone Backup

Do I need a Microsoft personal account for backup?

  • No. On an iPhone, backup uses Apple iCloud only.

Can I choose where the backup is stored?

  • No. Microsoft Authenticator iPhone backup always uses iCloud.

Is the backup secure?

  • Yes. The data is encrypted and protected by iCloud Keychain.
Summary

For iPhone users, Microsoft Authenticator iPhone backup is simple, automatic, and secure — as long as iCloud and iCloud Keychain are enabled, and iOS is configured to connect Microsoft Authenticator to iCloud. Microsoft does not back up your MFA credentials to your Microsoft 365 account because if you have lost your credentials, you cannot login to 365 to retreive them. Therefore, MFA credentials need to be stored elsewhere.

Google users and Microsoft (personal) account users save their MFA settings in Microsoft (personal) accounts. Click here for guidance to backup 365 MFA settings using Android.

Spending two minutes checking these settings now can save hours of disruption later, and possibly catastrophic loss. For 365 tenancy owners and Global Administrators, this is a critically important utilitiy. If you manage devices or Microsoft 365 for your business and want help configuring this service correctly, Comstat can assist: feel free to get in touch, or use out contact page to organize an appointment which suits your timetable.

You can return to our Index of Articles by clicking here

How to backup your Microsoft 365 Authenticator credentials

by | May 9, 2025

Backup Microsoft Authenticator settings

***Microsoft operates Microsoft Authenticator from its Entra ID service and procudeures in this post have been superceded with effect from September 2025. Instead, click here to read the latest guidelines for Microsoft Authenticator MFA account backup.***

*****

Backup and restore your Microsoft 365 multi-factor authentication (MFA) credentials to restore access to 365 dashboards in the event of a lost or stolen mobile phone.

This option is especially useful for 365 tenancy owners/global administrators. For example, if you are a 365 tenancy owner/Global Administrator (global Admin) then you cannot turn to a higher authority to re-establish credentials if your credentials are lost.

microsoft authenticator

Click on the headers below to find out how to backup Microsoft Authenticator on Apple and Android mobile phones.

Why backup has to be configured

Microsoft Authenticator data is not included in iCloud and Android mobile phone backups because the security keys are critically sensitive. Instead, you can organize Authenticator data backups in Microsoft Authenticator app settings. Authenticator backups can then be saved to Google Drive/iCloud, however you have to be verify identity against a Microsoft account to validate your identity when restoring credentials.

Microsoft Account vs Microsoft 365 account

You need a Microsoft account to backup and restore Microsoft Authenticator credentials. A Microsoft account and a Microsoft 365 account are two different entities. Without a Microsoft account you cannot back up your 365 credentials.

If you have a Microsoft account, but you have fogotten your credentials, you may need to establish a new Microsoft account. Do not lose the credentials to your Microsoft account. If you forget these credentials, you will not be able to connect Microsoft Authenticator on a new mobile phone to restore your settings. This would be catastrophic, so be sure to document your Microsoft Account credentials.

How to backup Microsoft Authenticator

Use the steps below to configure backup in Microsoft Authenticator settings. The process may vary from notes here because Microsoft updates its processes periodically. Also, the process might vary depending on your mobile phone hardware and operating system. Either way, prompts are not difficult to follow. These tips will steer you in the right direction:

  1. Open Microsoft Authenticator on your mobile phone
  2. Access Settings: Tap the three vertical dots at the top right corner and select <Settings>
  3. Enable <Backup>*
  4. Depending on your hardware, provide your Microsoft Account credentials if/when asked**

 * Apple users will need to be sure Authenticator is logged in to iCloud.

** In some cases, users may already be logged in to existing Microsoft Accounts, however the backup process will direct you to provide credentials as necessary. 

Recovery & Summary

To recover your credentials, install Microsoft Authenticator on your new mobile phone. Usually, the <Welcome> screen offers an option to <Begin Recovery>. This option depends on your hardware and software versions. The process is a little different for Apple and Android users, and is easily executed provided you have the credentials for iCloud/Google account, and your Microsoft Account.

You should periodically check Authenticator backup settings to verify backups are current. Authenticator app settings will confirm when your credentials were last backed up.

Authenticator offers options in settings to override Android or Apple screen-lock defaults. Also, some Apple and Android versions may need Authenticator enabling to run in the background. This can be checked in Authenticator settings.

 

 Summary

Tenancy owners and global admins do not have scope to resort to a higher authority to restore access to a 365 dashboard if their mobile phone is lost or destroyed. Therefore it is crucial to your organization’s IT continuity to protect your access settings to 365 Admin. Microsoft Authenticator enables you to restore existing credentials which cannot otherwise be found in Android and Apple backups.

For help, contact us using WhatsApp via our web site, or by phone.

About ComStat.uk: Internet Service Provider Comstat provides IT support, web hosting, and media services including web design, Microsoft 365 setup, and audio/video production, serving businesses across Denbighshire, North Wales and Wirral from Ruthin, and Lancashire and the Northwest from Bolton.