Migrate Google Authenticator to new iPhone 7
Just got a new iPhone 7, but when it restored it lost all my Google Authenticator two factor auth codes. I still have them all in my old phone, how can I port them to my new iPhone 7?
This is quite frustrating.
First, two things.
- Keep your backup codes
- Keep your old phone
From what I have found, you will need to use the "change" option on each of your 2-step verification enabled apps/sites. This will most likely require you to log into each account using your current 2-step verification process first (hence the use of backup codes or your old phone).
If you have trouble transferring the authenticator application over, try the following tutorial. https://www.brianckeegan.com/2016/09/how-to-transfer-googles-2-factor-authentication-to-a-new-iphone/
Unfortunately, you cannot transfer your tokens from one device to another. Only Google offers an option to transfer the secret key to another smartphone: you should go to 2-step verification page and click ‘Change phone’ and scan the QR code by your new device. Please note that this option works only with the Google Account. For all other accounts you should disable and then re-enable 2FA: go to account settings and turn off 2FA (you will be asked to provide an OTP generated by your old phone). As soon as you disable 2FA you can issue a new token on your new iPhone.
For those like me, 3 days ago Google has updated Google Authenticator and add the ability to transfer accounts. Use the three dots (top right) then "export accounts". If you have more than 10 2FA, you would need to do this multiple times.
The above appears to be two different issues:
Google Authenticator - An independent app for storing and generating token codes based on the Time based One Time Password (TOTP) protocol. Google Auth can be used by a variety of independent and unrelated services and applications.
Google G-Suite (email, calendar, drive etc.) that can use a number of different two factor protocols and apps (including Google Auth above or SMS) for login authentication.
In the case of number 1 above there is not a 'simple' way to backup and restore tokens, which is by design. However there are hacks and workarounds including apps like authy and screenshotting token barcodes (yeech defeats the purpose).
In the case of number 2, G-Suite provides backup or static emergency codes as referenced by norcal above permitting login when the authenticator device/token generator is lost or not available.