Home
%3CLINGO-SUB%20id%3D%22lingo-sub-852636%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-852636%22%20slang%3D%22en-US%22%3E%3CP%3EAwesome!%20Can%20you%20explain%20a%20little%20more%20on%20how%20the%20backup%20is%20secured%3F%20For%20example%2C%20if%20someone%20can%20login%20using%20your%20Microsoft%20(Personal)%20Account%2C%20will%20they%20be%20able%20to%20get%20the%20backup%20restored%20to%20any%20device%20they%20want%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%2C%20what%20are%20the%20plans%20to%20enable%20backup%20to%20Microsoft%20Work%20Account%20(that%20is%20Office%20365%2FAzure%20AD%20account)%2C%20even%20though%20I%20realize%20this%20can%20present%20a%20catch%2022%20scenario.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20plans%20to%20have%20these%20settings%20managed%20using%20Intune%20App%20Protection%20Policies%20so%20we%20can%20enforce%20settings%2C%20for%20example%20disable%2Fenable%20this%20feature%20including%20%E2%80%9DApp%20Lock%E2%80%9D%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-852819%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-852819%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F19218%22%20target%3D%22_blank%22%3E%40Jonas%20Back%3C%2FA%3E%2C%26nbsp%3Bthe%20backup%20is%20secured%20with%20your%20personal%20Microsoft%20account%20credentials.%20So%20yes%2C%20if%20someone%20can%20login%20to%20your%20account%2C%20and%20also%20successfully%20complete%20two%20step%20verification%20for%20your%20account%2C%20they%20can%20restore%20your%20backup%20on%20any%20device.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERight%20now%2C%20there%20aren't%20immediate%20plans%20to%20enable%20backup%20for%20Microsoft%20work%20accounts%2C%20because%20we%20need%20a%20mechanism%20for%20admins%20to%20turn%20cloud%20backup%20off.%20However%2C%20we%20are%20currently%20working%20on%20a%20mechanism%20to%20allow%20admins%20to%20enforce%20other%20settings%2C%20like%20%22App%20Lock%22.%20Admins%20won't%20be%20able%20to%20enforce%20settings%20through%20App%20Protection%20Policies.%20When%20we%20did%20the%20investigation%2C%20we%20found%20it%20didn't%20make%20sense%20to%20go%20that%20route%2C%20because%20some%20of%20the%20Intune%20App%20Protection%20Policies%20conflicted%20with%20Authenticator.%20For%20example%2C%20through%20APP%2C%20you%20could%20require%20MFA%20to%20open%20an%20app%2C%20but%20Authenticator%20is%20your%20mechanism%20for%20MFA%2C%20and%20so%20you%20get%20into%20a%20chicken-and-egg%20scenario.%20Instead%2C%20there%20will%20be%20a%20way%20to%20apply%20settings%20specifically%20to%20control%20the%20behavior%20of%20Authenticator.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-853129%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-853129%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20feature.%20I%20was%20hoping%20for%20this%20feature%20for%20so%20long.%20Thank%20you%20for%20delivering%20this%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-853818%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-853818%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F183504%22%20target%3D%22_blank%22%3E%40Olena%20Huang%3C%2FA%3E%26nbsp%3Bthank%20you%20for%20the%20detailed%20response.%20Really%20well%20summarised%20and%20I%20only%20wish%20that%20more%20feedback%20like%20yours%20(level%20of%20detail)%20is%20provided%20when%20launching%20new%20features%20and%20capabilities.%20Great%20content.%20Thanks%20again.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-854161%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-854161%22%20slang%3D%22en-US%22%3E%3CP%3EHow%20could%20I%20choose%20with%20which%20account%20I%20want%20backup%20my%20settings%20to%20the%20cloud%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-854680%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-854680%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F82153%22%20target%3D%22_blank%22%3E%40Matthias%20Hummler%3C%2FA%3E%26nbsp%3BIf%20you%20have%20multiple%20personal%20Microsoft%20accounts%20added%20to%20the%20app%2C%20when%20you%20enable%20backup%2C%20you'll%20be%20prompted%20to%20choose%20one%20of%20them%20to%20save%20your%20backup%20to.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-856571%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-856571%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F183504%22%20target%3D%22_blank%22%3E%40Olena%20Huang%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20clarification.%20I%20don't%20mind%20backing%20up%20to%20personal%20Microsoft%20Account%20(or%20iCloud%20for%20that%20matter%20on%20iOS)%20but%20I%20suspect%20some%20securityminded%20customers%20would%20want%20to%20force%20users%20to%20backup%20to%20their%20OneDrive%20for%20Business%20or%20simply%20blocking%20this%20feature%20completely%20since%20we%20can't%20force%20nor%20make%20sure%20the%20user's%20personal%20Microsoft%20Account%2FiCloud%20is%20secured%20properly.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-858845%22%20slang%3D%22en-US%22%3ERe%3A%20Cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-858845%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F19218%22%20target%3D%22_blank%22%3E%40Jonas%20Back%3C%2FA%3E%26nbsp%3Bthanks%20for%20your%20feedback.%20Going%20forward%2C%20we%20probably%20will%20keep%20the%20backup%20tied%20to%20the%20personal%20Microsoft%20account.%20End%20users%20shouldn't%20have%20to%20back%20up%20all%20their%20personal%20accounts%20to%20OneDrive%20for%20Business%2C%20as%20we%20make%20the%20promise%20that%20their%20admin%20won't%20get%20access%20to%20their%20personal%20credentials.%20However%2C%20for%20security%20minded%20customers%2C%20we%20definitely%20want%20to%20give%20the%20option%20to%20block%20the%20feature%20completely%20for%20work%2Fschool%20accounts%2C%20if%20they%20don't%20feel%20the%20user's%20personal%20Microsoft%20account%2FiCloud%20aren't%20properly%20secured.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-566369%22%20slang%3D%22en-US%22%3ECloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20now%20available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-566369%22%20slang%3D%22en-US%22%3E%3CP%3EHowdy%20folks%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%E2%80%99m%20excited%20to%20announce%20that%20cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20is%20now%20available.%20This%20means%20Android%20users%20can%20now%20back%20up%20their%20account%20credentials%20to%20the%20cloud%2C%20and%20then%20easily%20and%20securely%20transfer%20them%20to%20a%20new%20device%20when%20needed.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20id%3D%22toc-hId-1539678048%22%20id%3D%22toc-hId-1623811704%22%3ETry%20it%20out!%3C%2FH3%3E%0A%3CP%3EIf%20you%20don%E2%80%99t%20have%20the%20Microsoft%20Authenticator%20app%20yet%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fuse-microsoft-authenticator-with-office-365-1412611f-ad8d-43ab-807c-7965e5155411%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EUse%20Microsoft%20Authenticator%20with%20Office%20365%3C%2FA%3E%20for%20information%20on%20how%20to%20download%20and%20set%20up%20the%20app.%20Over%20the%20last%20few%20weeks%2C%20we%E2%80%99ve%20been%20rolling%20out%20the%20feature%20and%20it%E2%80%99s%20now%20100%25%20available%20for%20version%206.6.0%2B.%20Once%20you%20update%20your%20app%2C%20you%20can%20test%20the%20new%20feature%20out.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20id%3D%22toc-hId--1012478913%22%20id%3D%22toc-hId--928345257%22%3ETurn%20on%20backup%3C%2FH3%3E%0A%3CP%3ETo%20turn%20on%20the%20Microsoft%20Authenticator%20cloud%20backup%2C%20open%20the%20app%20and%20go%20to%20%3CSTRONG%3ESettings%3C%2FSTRONG%3E.%20Under%20%3CSTRONG%3EBackup%3C%2FSTRONG%3E%2C%20set%20the%20Cloud%20backup%20toggle%20to%20%3CSTRONG%3EOn%3C%2FSTRONG%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20318px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F131334i842A86E8B538B223%2Fimage-dimensions%2F318x633%3Fv%3D1.0%22%20width%3D%22318%22%20height%3D%22633%22%20alt%3D%22Microsoft%20Authenticator%20app%201.png%22%20title%3D%22Microsoft%20Authenticator%20app%201.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20you%20turn%20cloud%20backup%20on%2C%20your%20data%20is%20encrypted%20and%20stored%20with%20your%20personal%20Microsoft%20account.%20Your%20account%20credentials%20stay%20updated%20when%20you%20add%2C%20delete%2C%20or%20edit%20your%20accounts.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH3%20id%3D%22toc-hId-730331422%22%20id%3D%22toc-hId-814465078%22%3ERecovery%20on%20a%20new%20device%3C%2FH3%3E%0A%3CP%3ETo%20recover%20your%20account%20credentials%20on%20a%20new%20device%2C%20tap%20the%20%3CSTRONG%3EBegin%20Recovery%3C%2FSTRONG%3E%20button%20and%20sign%20in%20using%20the%20same%20personal%20Microsoft%20account%20as%20your%20previous%20device.%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20318px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F131336i596E11C80600F134%2Fimage-dimensions%2F318x634%3Fv%3D1.0%22%20width%3D%22318%22%20height%3D%22634%22%20alt%3D%22Microsoft%20Authenticator%20app%202.png%22%20title%3D%22Microsoft%20Authenticator%20app%202.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAfter%20you%20sign%20in%2C%20your%20OATH%20verification%20codes%20for%20your%20third-party%20accounts%20and%20personal%20Microsoft%20accounts%20are%20available.%20You%20also%20can%20re-enable%20push%20notifications%20for%20your%20personal%20and%20work%20or%20school%20Microsoft%20accounts.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20have%20additional%20questions%2C%20check%20out%20our%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fmulti-factor-authentication%2Fend-user%2Fmicrosoft-authenticator-app-backup-and-recovery%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMicrosoft%20Authenticator%20docs%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETest%20this%20feature%20out%20and%20let%20us%20know%20what%20you%20think!%20We%20always%20love%20to%20hear%20your%20feedback%20and%20suggestions.%20Let%20us%20know%20what%20you%20think%20in%20the%20comments%20below.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBest%20regards%2C%3C%2FP%3E%0A%3CP%3EAlex%20Simons%3C%2FP%3E%0A%3CP%3EDirector%20of%20Program%20Management%3C%2FP%3E%0A%3CP%3EMicrosoft%20Identity%20Division%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-566369%22%20slang%3D%22en-US%22%3E%3CP%3EI%E2%80%99m%20excited%20to%20announce%20that%20cloud%20backup%20and%20recovery%20for%20the%20Microsoft%20Authenticator%20app%20on%20Android%20is%20now%20available.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F131337i734FF015E0382845%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Microsoft%20Authenticator%20teaser.png%22%20title%3D%22Microsoft%20Authenticator%20teaser.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-566369%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%20and%20Access%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

Howdy folks,

 

I’m excited to announce that cloud backup and recovery for the Microsoft Authenticator app on Android is now available. This means Android users can now back up their account credentials to the cloud, and then easily and securely transfer them to a new device when needed.

 

Try it out!

If you don’t have the Microsoft Authenticator app yet, see Use Microsoft Authenticator with Office 365 for information on how to download and set up the app. Over the last few weeks, we’ve been rolling out the feature and it’s now 100% available for version 6.6.0+. Once you update your app, you can test the new feature out.

 

Turn on backup

To turn on the Microsoft Authenticator cloud backup, open the app and go to Settings. Under Backup, set the Cloud backup toggle to On.

 

Microsoft Authenticator app 1.png

 

Once you turn cloud backup on, your data is encrypted and stored with your personal Microsoft account. Your account credentials stay updated when you add, delete, or edit your accounts.

 

Recovery on a new device

To recover your account credentials on a new device, tap the Begin Recovery button and sign in using the same personal Microsoft account as your previous device.


Microsoft Authenticator app 2.png

 

After you sign in, your OATH verification codes for your third-party accounts and personal Microsoft accounts are available. You also can re-enable push notifications for your personal and work or school Microsoft accounts.

 

If you have additional questions, check out our Microsoft Authenticator docs.

 

Test this feature out and let us know what you think! We always love to hear your feedback and suggestions. Let us know what you think in the comments below.

 

Best regards,

Alex Simons

Director of Program Management

Microsoft Identity Division

 

8 Comments
Frequent Contributor

Awesome! Can you explain a little more on how the backup is secured? For example, if someone can login using your Microsoft (Personal) Account, will they be able to get the backup restored to any device they want?

 

Also, what are the plans to enable backup to Microsoft Work Account (that is Office 365/Azure AD account), even though I realize this can present a catch 22 scenario.

 

Any plans to have these settings managed using Intune App Protection Policies so we can enforce settings, for example disable/enable this feature including ”App Lock”?

Microsoft

Hi @Jonas Back, the backup is secured with your personal Microsoft account credentials. So yes, if someone can login to your account, and also successfully complete two step verification for your account, they can restore your backup on any device.

 

Right now, there aren't immediate plans to enable backup for Microsoft work accounts, because we need a mechanism for admins to turn cloud backup off. However, we are currently working on a mechanism to allow admins to enforce other settings, like "App Lock". Admins won't be able to enforce settings through App Protection Policies. When we did the investigation, we found it didn't make sense to go that route, because some of the Intune App Protection Policies conflicted with Authenticator. For example, through APP, you could require MFA to open an app, but Authenticator is your mechanism for MFA, and so you get into a chicken-and-egg scenario. Instead, there will be a way to apply settings specifically to control the behavior of Authenticator.

New Contributor

Great feature. I was hoping for this feature for so long. Thank you for delivering this 

Regular Visitor

@Olena Huang thank you for the detailed response. Really well summarised and I only wish that more feedback like yours (level of detail) is provided when launching new features and capabilities. Great content. Thanks again.

New Contributor

How could I choose with which account I want backup my settings to the cloud?

Microsoft

@Matthias Hummler If you have multiple personal Microsoft accounts added to the app, when you enable backup, you'll be prompted to choose one of them to save your backup to.

Frequent Contributor

@Olena Huang Thanks for the clarification. I don't mind backing up to personal Microsoft Account (or iCloud for that matter on iOS) but I suspect some securityminded customers would want to force users to backup to their OneDrive for Business or simply blocking this feature completely since we can't force nor make sure the user's personal Microsoft Account/iCloud is secured properly.

Microsoft

@Jonas Back thanks for your feedback. Going forward, we probably will keep the backup tied to the personal Microsoft account. End users shouldn't have to back up all their personal accounts to OneDrive for Business, as we make the promise that their admin won't get access to their personal credentials. However, for security minded customers, we definitely want to give the option to block the feature completely for work/school accounts, if they don't feel the user's personal Microsoft account/iCloud aren't properly secured.