Got a New Phone? Make Sure Your MFA Comes with You

The Holiday Phone Upgrade Checklist Starts With MFA

The holidays are one of the most popular times of year for new smartphones. Whether it is a personal upgrade, a company issued device refresh, or a surprise gift, new phones bring excitement and convenience. They also bring one very common and very disruptive problem if not handled correctly.

Multi factor authentication does not automatically move itself.

Each year, IT support teams see a spike in lockouts during November, December, and January because MFA apps were not transferred properly before an old phone was wiped, traded in, or lost.

Why MFA Is Tied to Your Old Phone

Multi factor authentication works because it verifies something you know like a password and something you have like your phone. Authenticator apps such as Microsoft Authenticator, Google Authenticator, Duo, and others are cryptographically tied to the original device.

That means when you sign into Microsoft 365, email, VPNs, accounting software, or other protected systems, the system expects approval from that specific phone. Once that phone is gone, access stops.

This is by design and it is what keeps your account secure.

COMMON HOLIDAY PHONE UPGRADE MISTAKES

During the holiday rush, users often run into issues like:

• Trading in or factory resetting an old phone before MFA is transferred
• Assuming iCloud or Google backups automatically restore authenticator apps
• Relying on SMS codes that are no longer enabled
• Upgrading phones outside of business hours when IT support is limited

The result is a locked account, delayed work, and an emergency support request that could have been avoided.

What You Should Do Before Switching Phones

Before powering down or resetting your old device, take these steps:

1. Transfer MFA apps first
   Many authenticator apps support secure cloud backup or device to device migration. This must be done while you still have access to the old phone.
2. Verify MFA works on the new phone
   Log into Microsoft 365 or another protected system and confirm you can approve the sign in on the new device.
3. Keep the old phone until access is confirmed
   Do not trade in or wipe the old phone until you are 100 percent certain everything works.
4. Notify IT ahead of time for work phones
   Especially during the holidays, letting IT know in advance avoids delays and after hours lockouts.

If You Already Lost Access to MFA

If the phone is already gone and MFA was not transferred, IT can help but it takes additional verification and time. This may include identity confirmation, temporary access methods, and re-enrollment of MFA devices.

During busy holiday periods, this can slow productivity and create unnecessary stress.

A Simple Holiday Reminder

New phones are exciting. Being locked out of your email, files, and applications is not.

A few minutes of planning before upgrading a device can save hours of downtime later. If you are planning a new phone this holiday season, make MFA part of the checklist.

If you are unsure how to transfer or re-enroll your authenticator apps, reach out before making the switch. It is always easier to prevent a problem than to recover from one.

Braver Technology Solutions | WeMakeITWork@BraverTechnology.com
Boston 617.315.8515 | Taunton 508.824.2260 | Providence 401.484.7900