Problem
Authenticator backup is unavailable after a phone replacement because the recovery process was never documented.
Solution
Root Cause / Diagnostic:
Switching to a new smartphone without executing a manual authenticator export/import transfer or enabling cloud sync results in the total loss of all time-based one-time password (TOTP) seed keys. The user wipes or trades in the old device, destroying the only existing token generator.
Actionable Fix:
1. Device Migration Verification: Before wiping or trading in any old device, use Google Authenticator's "Transfer accounts" export QR code to migrate all TOTP seeds to the new phone.
2. Authenticator Seed Backup: Store encrypted TOTP secret seed keys in an offline, zero-knowledge vault to enable instant recovery on replacement hardware.
3. Post-Migration Authentication Check: Test 2FA logins on the new phone across all channel accounts prior to factory resetting the old phone.
Pro Tip:
Before you trade in or wipe your old smartphone, verify that your Google Authenticator tokens are working on your new phone. Once that old phone is wiped, those 2FA codes are gone forever.
Switching to a new smartphone without executing a manual authenticator export/import transfer or enabling cloud sync results in the total loss of all time-based one-time password (TOTP) seed keys. The user wipes or trades in the old device, destroying the only existing token generator.
Actionable Fix:
1. Device Migration Verification: Before wiping or trading in any old device, use Google Authenticator's "Transfer accounts" export QR code to migrate all TOTP seeds to the new phone.
2. Authenticator Seed Backup: Store encrypted TOTP secret seed keys in an offline, zero-knowledge vault to enable instant recovery on replacement hardware.
3. Post-Migration Authentication Check: Test 2FA logins on the new phone across all channel accounts prior to factory resetting the old phone.
Pro Tip:
Before you trade in or wipe your old smartphone, verify that your Google Authenticator tokens are working on your new phone. Once that old phone is wiped, those 2FA codes are gone forever.