Skip to content
Instant2FA

Instant2FA

Google Authenticator Backup, Restore & Recovery

Google Authenticator backup can mean code synchronization, a manual phone transfer, or separate backup codes issued by a protected account. These are different recovery tools. Knowing which one you have determines whether your authenticator entries can be restored after a lost, broken, or replaced phone.

Google Authenticator backup
The short answer: Google Authenticator can synchronize verification codes through the Google Account signed into the app. If you use Authenticator without an account, the entries remain local and require a manual transfer while the old phone is available. Google Account backup codes are separate single-use sign-in codes; they do not restore all your Authenticator entries.

Three meanings of Google Authenticator backup

The phrase “Google Authenticator backup” is often used for three things that are not interchangeable:

Recovery tool What it protects What it does not do
Google Account synchronization Makes Authenticator entries available on devices signed into the same Google Account inside the app Does not replace each website’s independent recovery methods
Manual Authenticator transfer Copies locally stored entries from an available old phone to a new phone using transfer QR codes Cannot be started after the only local copy is lost or erased
Google Account backup codes Provides single-use alternatives for signing in to that Google Account Does not restore Authenticator entries for Facebook, a bank, or other third-party services

A normal Android or iCloud device backup should not be assumed to contain restorable Authenticator secrets. Use the app’s documented synchronization or transfer process and keep recovery methods issued by every important service.

Does Google Authenticator back up to the cloud?

Google Authenticator can synchronize codes through a Google Account. Google says those synchronized codes are encrypted in transit and at rest in its systems. To check your current mode, open Authenticator and inspect the profile area at the top of the app:

  • If the expected Google Account is selected, entries saved to that account can synchronize to another supported device signed into the same account.
  • If the app shows Use without an account or the entries were deliberately moved to local-only storage, those entries will not automatically appear elsewhere.
  • If codes seem missing, check whether they were saved under another Google Account or whether you were signed out.
Do not test a backup by deleting the app or its entries. Install Authenticator on another trusted device, sign in with the correct Google Account, and confirm the expected codes appear before removing anything.

Does Google Authenticator back up to iCloud?

Do not rely on an ordinary iCloud phone backup as the Google Authenticator recovery method. Google documents synchronization through the Google Account used inside Authenticator and a manual export/import process for local-only entries. Confirm the entries on a second device before erasing an iPhone.

What about Android backups?

Likewise, do not assume a general Android device backup will restore locally stored authenticator entries. Use Google Account synchronization or the official manual transfer flow while the old device is still available.

Where are Google Authenticator backup codes?

There is no universal set of “Google Authenticator backup codes” inside the Authenticator app. For a Google Account, backup codes are managed in the account’s 2-Step Verification settings:

  1. Open your Google Account directly and choose Security & sign-in.
  2. Under How you sign in to Google, open 2-Step Verification.
  3. Find Backup codes and continue after Google verifies you.
  4. Create, download, or print the codes, then store them somewhere protected and separate from the authenticator phone.

Google currently provides a set of ten eight-digit backup codes. Each code works once. Creating a new set deactivates the old set. Google states that backup codes cannot be downloaded by accounts enrolled in its Advanced Protection Program.

How to find previously downloaded Google backup codes

Google suggests searching your computer for a file named like Backup-codes-username.txt, replacing “username” with your Google Account username. This works only if you previously downloaded the codes. A printed copy or an entry stored in a secure password manager may be wherever you chose to keep it. If you need a vault, compare our password manager recommendations and avoid keeping every recovery factor in one place.

Never share a backup code. Treat every unused code like a password. Google says it asks for a backup code only during sign-in—not through a call, email, chat, or unexpected form.

How to use a Google backup code

  1. Begin signing in to your Google Account through the official site or app.
  2. Choose Try another way when the usual second step is unavailable.
  3. Select the backup-code option.
  4. Enter one unused eight-digit code and mark it as used afterward.

How to restore Google Authenticator codes

If your codes were synchronized

Install the official Google Authenticator app and sign in inside the app with the same Google Account. The synchronized entries should become available. If they do not, check the selected profile, switch among any Google Accounts previously used, and check whether the old app used local-only mode.

If you still have the old phone

Use the old phone to export locally stored entries and scan the transfer QR code with the new phone. Keep the transfer private and test accounts before erasing the original device. Follow the complete Google Authenticator phone-transfer guide for the exact steps.

If the unsynchronized entries were deleted

Google Authenticator cannot reconstruct a third-party service’s secret from nothing. Use that service’s recovery code, another enrolled factor, a passkey or security key, a trusted session, or its official recovery process. After access is restored, remove the missing authenticator and enroll the new device.

Be cautious with anyone claiming they can regenerate deleted Authenticator entries for a fee. Do not disclose passwords, setup keys, transfer QR codes, backup codes, or account-recovery answers.

Google Authenticator lost phone recovery

If a phone containing authenticator codes is lost or stolen, first protect the device and the accounts it could access:

Lock or erase the device

Use the platform’s official lost-device tools. If appropriate, remove the device from your Google Account and other important accounts.

Check synchronization

Install Authenticator on a trusted device and sign in with the same Google Account to see whether the entries were synchronized.

Use an enrolled backup route

For a Google Account, possible options can include another signed-in phone, another registered number, a saved backup code, a security key, a passkey on another device, or a trusted device.

Recover third-party services separately

Each website controls its own recovery. Use its saved recovery code or official process, then replace the lost authenticator enrollment.

Review and rebuild

Check recent activity, change credentials when warranted, create fresh recovery codes, and test another backup sign-in method.

Can you recover Google Authenticator without the old phone?

Yes when the entries were synchronized and you can securely access the same Google Account. Otherwise, recovery happens at each protected service rather than inside Google Authenticator. An unsynchronized entry stored only on the lost phone cannot simply be restored on demand.

What if you have no backup code?

Try another factor or trusted session already enrolled with the service. For a Google Account, follow Google’s official account-recovery flow if no backup option works. Work or school users may need their administrator. Other websites have their own identity checks and support rules.

Build a safer Google Authenticator backup plan

  • Choose deliberately between Google Account synchronization and local-only storage.
  • Confirm synchronized entries on another trusted device without deleting the originals.
  • Generate recovery codes for every important service—not only your Google Account.
  • Store recovery codes separately from the phone and protect them from unauthorized access.
  • Add a second strong sign-in route, such as another passkey or hardware security key, when supported.
  • Test recovery before replacing, resetting, selling, or recycling a device.
  • Revoke and replace backup codes immediately if they may have been exposed.

For first-time enrollment, see how to set up Google Authenticator safely. To compare different backup models, read our guide to authenticator apps.

Frequently asked questions

Select a question to open or close its answer.

Does Google Authenticator have a backup?

Google Authenticator can synchronize codes through the Google Account signed into the app. Local-only entries require a manual transfer while the old device is available.

Where are Google Authenticator backup codes?

Google Account backup codes are in the Google Account’s Security and 2-Step Verification settings, not in the Authenticator code list. Other websites issue and manage their own recovery codes.

Can Google Authenticator codes be restored?

Synchronized entries should appear after signing in with the same Google Account. Local-only entries can be manually transferred from an available old phone. If neither exists, recover access through each protected service.

Does Google Authenticator back up to iCloud?

Do not rely on an ordinary iCloud device backup. Google documents Authenticator synchronization through a Google Account and manual transfer for local-only entries.

Can I recover Google Authenticator after losing my phone?

Synchronized entries may be available through the same Google Account. Otherwise use recovery codes, another enrolled factor, a trusted session, or the official recovery process for each protected service.

Do Google backup codes restore third-party Authenticator accounts?

No. A Google Account backup code signs you in to that Google Account. It does not restore Authenticator entries or provide access to unrelated websites.

Sources and further reading

Google and third-party services can change their interfaces and recovery rules. Follow the current official prompts for the specific account you are protecting.