What to Do If You Lose Your Phone With the Google Authenticator App on It

What is Google Authenticator?

Google Authenticator is an app that generates a verification code to provide a second layer of security when signing in to services with 2FA (two-factor authentication). By offering a second layer of identity authentication in addition to a password, Google Authenticator helps secure your online accounts.

Is Google Authenticator safe?

Google Authenticator is very secure because it creates unique, time-sensitive codes that are linked to a particular phone and can’t be easily faked. Google Authenticator isn’t connected to the cloud, which reduces your vulnerability to data breaches.

Another advantage of Google’s code generator app is that it doesn’t require an internet or mobile service, so you don’t have to worry about being locked out of your accounts if you don’t have a connection, or your authentication data being sniffed by hackers.

But Google Authenticator doesn’t have a passcode or biometric lock. So someone with access to your phone and the relevant password could log in to your account. And even without a password, a phone thief may still be able to get your Instagram recovery code, or recovery keys for other services linked to your device.

It's difficult for a hacker to get both your phone and your password, which is the whole reason 2FA exists — but it can happen. That’s why you should use Google Authenticator in tandem with one of the best privacy and security apps.

How do I use Google Authenticator?

Using the Google Authenticator app helps you keep sensitive accounts safe.

Here's how to use the Google Authenticator app:

1. Log in to the account you want to use with Google Authenticator.

2. Go to the account's security settings and select "2-step verification settings," "2FA settings," or similar, and follow the setup instructions.

3. Open Google Authenticator (download the app if it’s not on your phone) and scan the QR code or enter the setup key generated via your chosen account's 2FA settings.

   

Now that your account is linked to your device through the Authenticator app, whenever you sign in the Google code generator will give you a one-time security key which you’ll need to enter to sign in to your account.

Can I recover my Google Authenticator?

You can’t recover Google Authenticator from a lost phone because the secret keys Google Authenticator generates are specific to the device. If you lose the phone, you lose access to the secret keys.

Likewise, anyone who finds Google Authenticator on a lost phone has access to the 2FA codes for the accounts within, which can be a problem if they know the corresponding account passwords.

Google mitigates this risk by not syncing Google Authenticator to the cloud. But this also means that if you lose your phone, or delete the app by accident, all the data is lost too — and you won’t be able to generate a Google Authenticator key to get past the 2FA barrier on your accounts.

But while you can’t recover Google Authenticator like you can recover Windows passwords or other authentication keys, you can still access your 2FA accounts if you lose your phone with the Google Authenticator app on it.

What should I do if I lose a phone with Google Authenticator?

If your lost phone has Google Authenticator on it, you need to secure your accounts connected to the app by logging in with an alternate method, and resetting the 2FA settings. You should also erase your phone remotely if possible. You can then add Google Authenticator to a new phone and re-link it to your accounts.

Try to log in with an alternate method

Most services have procedures in place that let you log in to 2FA protected accounts in other ways to reset verification. Here are some of the workarounds for logging into your accounts without Google Authenticator:

• Backup codes: Many services provide one-time backup codes for emergency sign-ins, in case you lose the device linked to the 2FA protocol. If you have these backup codes, you can use one to sign in.

• Verification on another device: If you’re logged into a service elsewhere, you can go to the security settings and reset or disable 2FA. For instance, you can reverify your Google account if you have Google devices logged in, such as Google Home Mini or Google Nest.

• SMS code: Once you have a replacement phone and new SIM card, it may be possible to request a verification code via SMS to access an account without a Google Authenticator key.

• Contact customer service: If you can’t authenticate yourself any other way, customer support for your account may be able to verify your credentials and restore access.

Erase your lost phone remotely

To secure the data stored locally on your device and elsewhere, it’s important to remotely erase the contents of your lost phone, particularly if you use the Chrome browser to manage passwords on your phone. Thankfully, there are a number of failsafes in place in the case of phone theft or loss.

You can erase your Android device remotely using the Google lost phone protocol. But for this to work, your lost Android device must be turned on, signed into a Google Account, and connected to the internet. The device must also have location finding and “Find My Device” turned on.

Apple also offers a similar service for erasing your iPhone. First, sign in to your iCloud account using your Apple ID. Then click Find iPhone > Your iPhone > Erase iPhone and confirm your selection.

The sensitive information on your phone is a sitting duck if your device falls into the wrong hands. And by the time you remotely erase the contents, it may be too late. That’s why knowing how to clean up your iPhone and clear your Android cache is important for keeping compromising data to a minimum.

Set up or restore Google Authenticator on a new phone

Once you’ve gained access to an impacted account, you can restore Google Authenticator by setting it up on a new phone. Although the specific steps will vary from service to service, the general process is the same for all types of account.

How to set up Google Authenticator on Android

Here’s how to set up Authenticator for a Google Account on an Android phone:

1. Download Google Authenticator from the Google Play store and install it on your phone.

2. In your Google account settings, go to the 2 step verification section and select the Authenticator app.

   

3. Click the + Set up authenticator button and a QR code will pop up.

   

4. Tap the colored + in the Google Authenticator app.

5. Scan the Google Authenticator QR code on your computer screen. Then click Next.

   

6. Enter the 6-digit code from your phone and click Verify.

   

How to set up Google Authenticator on iOS

Here’s how to set up Google Authenticator on an iPhone or iPad for your Google account:

1. Go to your Google My Account page and sign in.

2. Tap the Security tab on the top menu and select 2-Step Verification under "Signing in to Google.”

   

3. Select the Authenticator app under “Add more second steps to verify it's you,” and tap the + Set up authenticator button.

   

4. Follow the prompts to finish setting up Google Authenticator.

After setting up Authenticator on your iPhone, you may want to set up biometric log-ins using fingerprint scans, retina scans, facial recognition, or other types of biometric data to help secure your device in the event that it falls into the wrong hands.

How do I transfer Google Authenticator to a new phone?

If you still have access to your old phone, you can transfer Google Authenticator to your new phone by using the app’s functions on both phones. If you don’t have your old phone, you can transfer your accounts to your new phone one by one — but only if you can log in to them another way.

Transfer Google Authenticator without an old phone

You can’t transfer Google Authenticator to a new phone without the old phone, but you can switch your Authenticator key to a new phone by logging into the 2-step verification section of your account settings and clicking Change authenticator app.

Transfer Google Authenticator using an old phone

If you have an old phone and want to move your existing Google Authenticator to a new phone, you can transfer all your accounts simply and easily through the app.

Here’s how to transfer Google Authenticator to a new Android phone, iPhone, or iPad:

On your old phone:

1. Open Authenticator and tap the three-dot menu.

2. Select Transfer accounts and then Export accounts.

3. Pick the accounts you want to transfer and tap Next. QR codes with your account info will be created.

On your new phone:

1. Open Authenticator and tap Get Started.

2. Select Import existing accounts? and then Scan QR code.

3. Scan the QR codes from your old phone to link the accounts to your new phone.

If the transfer worked, you’ll receive confirmation in the app. If the accounts were not successfully linked, try scanning in the QR codes again one at a time.

How to back up Google Authenticator

You can’t back up the Google Authenticator app itself, but you can create backups of your individual Google Authenticator accounts by requesting their respective 2FA backup codes through security settings, or generating a QR code of your account keys through the Authenticator app. Then take a picture of the QR code and store it securely.

Take a photo of “Export” QR code

While you can’t take a screenshot of an Export QR code with the verification token for your accounts, you can take a photo of it.

Here’s how to take a photo of the Export QR code on Google Authenticator:

1. Open Google Authenticator and tap the three-dot menu.

2. Select Transfer accounts and then Export accounts.

3. Select the accounts you want to generate a QR code for and then tap Next.

4. Take a clear photo of the generated QR code.

Finally, make sure to store the image of the QR code securely on another device, so that you can access your account codes even if you lose the device with your Google Authenticator app.

Set up the Google Authenticator app on another device

You can back up your individual authenticator codes on multiple devices by exporting your account codes into a QR code and then storing them in another instance of the Authenticator app. To do this, follow the same process as you would for transferring Google Authenticator from an old phone.

Use more 2FA methods

Having another 2FA method beside Google’s authentication app, such as Google backup codes, can let you into your account even if you lose your phone with the Authenticator app on it. Here’s how to get backup codes for your Google Account:

1. Go to the 2-step verification section of your Google Account page and select Backup codes.

   

2. Click + Get backup codes.

   

You can take a screenshot of these Google backup codes or write them down, but make sure you store them securely. Some of the best password managers have a secure place to keep sensitive notes, such as backup keys or QR codes.

Use an alternative authentication app

Google Authenticator doesn’t link to the cloud, but other authentication apps such as Authy, LastPass, and Microsoft Authenticator do. Using an alternative authentication app with a cloud-based backup makes it easier to recover your secret security keys, but it also makes it more likely that your sensitive information will be compromised in a data breach.

Protect your personal data with Google Authenticator and Avast BreachGuard

An authenticator app and 2FA helps to secure your accounts and sensitive information, but it's not a silver bullet for all your data security issues. If your login credentials ever leak, Google Authenticator can’t help you secure them. That’s where Avast BreachGuard comes in, letting you reclaim control over your personal info at the click of a button.

With advanced identity theft protection including always-on data breach monitoring and an Identity Assist support team on hand 24/7, you’ll always have the tools you need to keep your personal credentials safe. Get your own personal data security detail today with Avast BreachGuard.

FAQs

Can you recover Google Authenticator without the old phone?

You can recover Google Authenticator even if you lose access to your old phone. To do so, log into your Google account on your new phone and check “Accounts and Import” under the “See all settings” option. Then, access the two-step verification menu and open the “Authenticator app” section. From there, you can change the Authenticator App you want to use.

Can I recover Google Authenticator?

Google Authenticator apps are tied to a particular device and cannot be recovered remotely. But it is possible to recover Google Authenticator access to your account by logging in through a new phone or using the recovery codes provided when you first logged in.

What if I lost my Google Authenticator key?

If you lose your backup codes for Google Authenticator, you can revoke them and get a new set of codes. You need to go to the two-step verification section of your Google Account, select “Show codes,” and then “Get new codes.”

How do I find my Google Authenticator secret key?

When you pair the Google Authenticator app with an account, a secret key in the form of a QR code is generated. Scan this QR code with your phone to connect the application to the account. Some accounts may allow you to regenerate your secret key and QR code via the two-factor authentication account settings menu.