A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Microsoft Authenticator does not provide a way to export full account data or retrieve the TOTP secret keys for your accounts.
What Authenticator does support is backup and restore of account credentials within the Microsoft ecosystem, but this is only for recovery into Authenticator itself and only between the same device type (iOS→iOS, Android→Android):
- On iOS, credentials are backed up to iCloud when iCloud backup is enabled for Authenticator.
- On Android, credentials are backed up to the cloud when the Cloud Backup toggle is enabled and a Microsoft personal account is selected as the recovery account.
This backup includes:
- Microsoft personal accounts (one-time password codes and account names, depending on sign-in method).
- Work or school accounts (account names only; sign-in required again after restore).
- Third‑party accounts using one‑time password codes.
However:
- The backup cannot be exported as a file for use in other authenticator apps.
- Secret keys (shared secrets used to generate OTP codes) are not exposed or retrievable from the app.
- Backup is intended only for restoring into Microsoft Authenticator on a new device of the same platform.
If migrating to another authenticator, each account must be reconfigured individually using that service’s MFA setup process (typically by scanning a new QR code or entering a new secret key provided by the service), since Authenticator does not offer an export of secrets.
For passwords stored in Authenticator’s autofill feature (not the OTP accounts), there is an export option:
- Open Authenticator and go to Settings.
- Scroll to the Autofill section and select Export Passwords.
- Select Export, choose a folder, and save the file.
- Import that CSV into another password manager (for example, Google Password Manager or iCloud Keychain, using their documented import steps).
Important security note:
- Exported password files are unencrypted and not secure; they should be deleted immediately after successful import.
- Only passwords can be exported; addresses and payment cards must be recreated manually.
References:
- Back up account credentials in Microsoft Authenticator
- Back up your accounts in Microsoft Authenticator
- To delete a backup
- Export passwords from Microsoft Authenticator
- Changes to Microsoft Authenticator autofill
- Import passwords into the Microsoft Authenticator app
- Troubleshoot problems with Microsoft Authenticator