If you are changing phones, moving Facebook two-factor authentication correctly is essential to avoid getting locked out of your account.
This guide explains the exact steps to update your authenticator app, recovery options, and backup methods so you can switch devices with minimal risk.
Why you need to update Facebook two-factor authentication when changing phones
Facebook uses two-factor authentication, also called 2FA, to add a second layer of protection beyond your password.
If your codes are generated by an authenticator app such as Google Authenticator, Microsoft Authenticator, Duo Mobile, or Authy, those codes are tied to the device unless you transfer them first.
When you get a new phone, the old phone may stop being available, which means Facebook login attempts can fail if you cannot produce a valid code.
That is why it is important to move access before wiping, selling, or recycling the old device.
What to check before you switch phones
Before changing devices, confirm which type of 2FA you use on Facebook.
The setup process differs depending on whether you use text message codes, an authenticator app, or a security key.
- Authenticator app: Time-based codes generated inside an app on your phone.
- SMS codes: Login codes sent by text message to your mobile number.
- Security key: A physical hardware key such as a YubiKey.
- Recovery methods: Backup codes, trusted devices, or an email address.
If possible, keep both phones available during the transition.
That gives you the best chance to confirm the new setup without interrupting access.
How to move two factor authentication to a new phone for Facebook
The safest approach is to add the new phone to your authentication method before removing the old one.
In practice, that means installing the same authenticator app on the new device, signing into the app if it supports cloud backup, and then testing a fresh Facebook login.
Step 1: Install your authenticator app on the new phone
Download the same app you used on the old phone from the Apple App Store or Google Play Store.
Popular options include Google Authenticator, Microsoft Authenticator, Authy, and Duo Mobile.
If your app supports account sync or backup, sign in using the same account you used before.
Some apps automatically restore codes, while others require a manual export from the old phone.
Step 2: Transfer or restore your authentication codes
How you move the codes depends on the app:
- Google Authenticator: Use the built-in account transfer feature or QR export/import if available.
- Microsoft Authenticator: Turn on cloud backup on the old phone, then restore during setup on the new phone.
- Authy: Log in with the same phone number and approve the new device if prompted.
- Duo Mobile: Re-enroll the device if automatic transfer is not available.
After restoring, look for the entry linked to Facebook and confirm that the code changes every 30 seconds, which indicates the authenticator is working.
Step 3: Sign in to Facebook and update security settings
Once the codes are available on the new phone, sign in to Facebook on a browser or another device.
Go to your account settings and review the two-factor authentication method connected to your account.
Facebook generally lets you manage login protection through the Accounts Center or Security and Login settings, depending on whether you are using the Facebook app, a web browser, or a linked Meta account.
From there, verify that your current 2FA method is active and that your phone number or app is correct.
Step 4: Test the new phone before removing the old one
Perform a test login from a device or browser where you are not already signed in.
Facebook should ask for your password and then a 2FA code.
Enter the code from the new phone and confirm that the login succeeds.
If the code works, keep the old phone untouched for a short period in case you need to troubleshoot.
Do not factory reset it until you are confident the new setup is stable.
How to switch Facebook 2FA if you use SMS codes
If your Facebook account uses text-message verification, the transfer is usually simpler because the code follows your phone number rather than the device.
Insert your SIM card into the new phone, or activate the same number on the new device through your carrier.
Then log in to Facebook and confirm that the number shown in your security settings is current.
If you changed carriers or switched to an eSIM, make sure the number is still receiving messages before relying on it for login.
How to keep access if your old phone is lost or broken
If the old phone is gone, your recovery options depend on what Facebook account recovery data you already have.
Try these steps in order:
- Use backup codes if you saved them when setting up 2FA.
- Check whether you are still logged in on another phone, tablet, or desktop browser.
- Use your trusted email or phone number if Facebook offers a recovery path.
- Follow Facebook’s account recovery prompts and verify your identity.
Some authenticator apps also store backups in the cloud or on another signed-in device.
If you used one of those, restore the app first, then try the Facebook login again.
Common mistakes to avoid during the move
Many lockouts happen because users reset the old phone too early or assume the new phone has the codes without testing them.
Avoid these common mistakes:
- Deleting the authenticator app from the old phone before confirming transfer.
- Forgetting to export or back up recovery codes.
- Changing your Facebook password and phone at the same time without a recovery plan.
- Assuming SMS codes will work if your number has not been activated on the new device.
- Ignoring time sync issues, which can cause authenticator codes to fail.
If codes are being rejected, check the time and date settings on the new phone.
Authenticator apps depend on accurate device time to generate valid one-time passwords.
Best practices for Facebook account security after the move
After you finish transferring 2FA, strengthen your account with a few simple checks.
These steps help reduce the chance of future access problems and improve your overall security posture.
- Save backup codes in a secure password manager or offline location.
- Review logged-in devices and remove ones you no longer use.
- Confirm your recovery email and phone number are current.
- Use a password manager to create a strong, unique Facebook password.
- Consider adding a hardware security key if your account needs stronger protection.
For business pages, ad accounts, or accounts managed through Meta Business Suite, make sure another trusted administrator also has access.
Shared access can prevent a single device change from disrupting page or ad management.
When to contact Facebook support or use recovery tools
If you cannot complete the transfer and cannot log in, Facebook’s recovery tools may be the only option.
This is especially important if you no longer have the old phone, lost your backup codes, and cannot receive SMS messages.
Use the account recovery process from the login page and follow the identity verification steps carefully.
If your account is tied to a business, also check whether another admin can help confirm your identity and restore access.
For the smoothest transition, always move the authenticator first, test it, and only then remove the old device.
That sequence is the key to learning how to move two factor authentication to a new phone for Facebook without losing access.