Upgrading to a new smartphone is usually an exciting experience, but for anyone who takes their digital security seriously, it introduces a massive point of anxiety. Because two-factor authentication (2FA) apps generate time-based codes locally on your device, simply logging into your new phone will not magically restore your security tokens. If you wipe your old phone before migrating your 2FA app, you risk being permanently locked out of your email, banking, and social media accounts.
Fortunately, moving your security codes is no longer the frustrating, manual process it used to be. Learning how to transfer Google Authenticator to a new phone takes only a few minutes, provided you still have physical access to your old device.
The Cloud Sync Method vs The Manual Export Method
Recently, Google updated the Authenticator app to include automatic cloud syncing. If you are signed into your Google account within the app and the cloud icon in the top right corner is green, your 2FA codes are securely backed up to your Google account. In this scenario, simply installing Google Authenticator on your new phone and logging into the same Google account will automatically restore all of your codes.
However, many privacy-conscious users intentionally disable cloud syncing because they do not want their highly sensitive 2FA seeds stored on Google’s servers. If you use Authenticator without an account (or simply prefer an offline transfer method), you must use the manual QR code export feature.
How to Manually Transfer Your Codes via QR Code
To begin this process, you will need both your old smartphone and your new smartphone unlocked and placed side-by-side.
- Download and install the Google Authenticator app from the App Store or Google Play Store on your new phone.
- Open the app on your new phone and tap Get Started. Choose to use the app without an account if you prefer offline storage.
- On your old phone, open Google Authenticator.
- Tap the three-line hamburger menu icon in the top left corner (or the profile icon on newer versions) and select Transfer accounts.
- Tap on Export accounts. You may be prompted to verify your identity using Face ID, Touch ID, or your device PIN.
- A list of all your saved accounts will appear. By default, they are all selected. Tap Next to generate a large QR code on your old phone’s screen. (If you have dozens of accounts, it may generate multiple QR codes).
- Now, pick up your new phone. Tap the + (plus) icon in the bottom right corner and select Scan a QR code.
- Point your new phone’s camera at the QR code displayed on your old phone. The accounts will transfer instantly.
Verifying the Transfer
Before you even think about factory resetting your old phone, you absolutely must verify that the transfer was successful. A corrupted transfer could result in total data loss.
Place both phones side-by-side and wait for the countdown timer next to the codes to refresh. The six-digit codes displayed on both the old and new phones should be completely identical. To be absolutely certain, attempt to log into a low-risk account (such as Twitter or Reddit) using the code generated by your new phone. If the login is successful, your transfer is complete.
How to Safely Remove Codes from Your Old Phone
Once you have verified that your new phone is successfully generating valid codes, you must destroy the highly sensitive seeds remaining on your old device to prevent them from falling into the wrong hands.
- On your old phone, return to the Transfer accounts menu.
- If you just finished the export process, the app will ask if you want to remove your exported accounts. Select Remove accounts.
- If that prompt does not appear, simply delete the Google Authenticator app entirely from your old phone, and proceed with a full factory reset of the device.
Your new phone is now the sole generator of your two-factor authentication codes. Keep it secure, and ensure your lock screen is protected by a strong passcode.
