Moving your authenticator to a new phone without a lockout
The old phone still works, so move your codes now. A safe order of steps for switching devices.
In this guide
Getting a new phone is exciting until you realize your authenticator codes live on the old one. Handled in the wrong order, a phone upgrade becomes a lockout from every account protected by app codes. Handled in the right order, it takes fifteen minutes. The single most important rule: do not wipe, sell or trade in the old phone until every account works on the new one.
Before you start
- Keep the old phone charged and working.
- Find your recovery codes for important accounts, including BuyVCC. You probably will not need them, but having them nearby removes the stress.
- Make a list of accounts in your authenticator. Most apps show them on the main screen; take a written list, not a screenshot of codes.
- Update the authenticator app on the old phone to the latest version.
Route 1: the app's own transfer or backup
Many authenticator apps offer one of these:
- Cloud backup and restore. Sign in to the same app account on the new phone and the codes appear.
- Direct transfer. The old phone shows a QR code containing all your accounts; the new phone scans it.
- Encrypted export file. Export from the old phone, move the file securely, import on the new phone with the password.
Whichever route your app offers, after the transfer, open the app on both phones and check that a few accounts show matching codes. Then continue to the testing step below. Delete any export file once the import is done.
Route 2: re-enroll each account
If your app has no transfer feature, or you are switching to a different app, move accounts one at a time:
- Install the authenticator on the new phone.
- Sign in to an account on a computer, using a code from the old phone.
- Go to that account's security settings and choose to change or reset the authenticator.
- Scan the new QR code with the new phone.
- Confirm with a code from the new phone.
- Remove the entry from the old phone only after this account works with the new one.
- Repeat for each account.
Re-enrolling generates a new secret, so the old phone's codes for that account stop working. That is good: it means a lost or sold old phone cannot be used to sign in.
On BuyVCC, the security page in your account lets you set up the authenticator again after confirming with a current code. It also lets you generate fresh recovery codes, which is a good idea after any device change.
Test every account
For each account, sign out and sign back in using a code from the new phone. Only then is it truly moved. People skip this step and discover months later that one account was never transferred. Tick each account off your written list as you test it.
Then retire the old phone
- Delete the authenticator app on the old phone, or remove each entry.
- Sign out of accounts and remove the phone from any "trusted devices" lists.
- Factory reset the old phone before selling, trading in or recycling it.
If something goes wrong
| Problem | What to do |
|---|---|
| Codes on the new phone are rejected | Check the phone's clock is set automatically; wrong time means wrong codes |
| Transfer brought only some accounts | Re-enroll the missing ones while the old phone still works |
| Old phone already wiped | Use recovery codes to sign in, then set up the authenticator again |
| No old phone and no recovery codes | Contact each service's support for a reset |
For BuyVCC, if you have lost both your authenticator and your recovery codes, open a support ticket from the sign-in help or contact page. A reset involves checks that confirm you own the account. It takes longer than a recovery code on purpose, because an easy reset would also help someone trying to break in.
Phone clock and time zones
Authenticator codes depend on accurate time. If codes are rejected after a move, check that the new phone sets its date and time automatically. Time zone changes while traveling do not matter, because codes use universal time, but a clock that is a minute or two off does.
Lost phone instead of new phone?
If the old phone was lost or stolen rather than replaced, the order of steps changes. Act quickly: sign in with recovery codes on a trusted computer, set up the authenticator on a new device, generate fresh recovery codes, and change your password. The sign-in alert plan lists the other steps. If you think someone may have accessed your card details, contact support straight away.
Choosing a better app while you are at it
A phone change is the best moment to switch to an authenticator with encrypted backup if yours lacks one. Choosing an authenticator app compares the options. Re-enrolling accounts one by one is a little slower, but you will never face this problem again.
Quick answers
Can I keep using the old phone as a backup?
Only if you transferred the same secrets rather than re-enrolling. Keep it locked and safe if so. Most people find it simpler to retire it.
Will my cards be affected by changing phones?
No. Cards stay as they are. You need a working code to reveal their details.
See how it works and pricing.
BuyVCC Team
The people who review BuyVCC orders write these guides from the questions customers send us. Notice something outdated? Let us know.