As you know many online services use Multi-Factor Authentication (MFA) to help protect your account.
If you’re replacing your phone, there is one important step you must complete before you wipe, trade in or recycle your old device.
The mistake people make
Performing a phone migration from your old phone to your new one is super easy and will probably migrate your favourite Authenticator app across to the new phone, unfortunately that is not enough for some online accounts – eg the University OXFORD SSO MFA.
Your OXFORD SSO Microsoft Authenticator registration is linked to your current physical phone, not the app. Installing the app on a new device does not transfer your authentication methods automatically.
If you wipe or trade-in your old phone before registering the new one, you may be unable to sign in to your online accounts.
Before you wipe your old phone
While you still have your old phone:
- Go to https://mysignins.microsoft.com/security-info
- Sign in and approve the sign-in request using your existing phone.
- Select Add sign-in method
- Follow the prompts to register Microsoft Authenticator on your new phone.
- Test that you can successfully approve a sign-in using your new phone.
- Once you’ve confirmed everything works, you can safely wipe, trade in or recycle your old phone.
Why is the old phone needed?
Microsoft requires you to prove your identity before you can change your authentication methods.
In most cases, the simplest way to do this is by approving the request using your existing registered phone.
If you no longer have access to that phone, you won’t be able to update your Microsoft Authenticator registration yourself.
Already wiped or traded in your old phone?
If you’ve already erased, lost or traded in your old phone before registering the new one, don’t panic.
Visit the IT Office (FQ1.5) as we will need to verify your identity before we can reset your MFA registration.
If you are away from Oxford then we will need to arrange a MS Teams call – so please provide a telephone number we can contact you on to arrange an online meeting. If you are overseas then knowing your local time zone is also helpful.
Remember
Add MFA to new phone before wiping old phone.
Before getting rid of your old phone, make sure you’ve:
- Registered Microsoft Authenticator on your new phone.
- Successfully approved a sign-in using the new phone.
- Confirmed you can still access your account.
Spending a couple of minutes doing this before replacing your phone can save you from being locked out later.
If you’re unsure at any stage, please contact us in the IT Office before wiping your old phone – we are here to help.