🔐 Two-Factor Auth (2FA)

What Happens to Your Microsoft Authenticator Account When You Die

Critical2FA AppCloud Backup Available
Without the phone that has the authenticator app, you may be locked out of every account that uses 2FA. Keep the deceased's phone active and charged.

Quick Facts

Urgency

Critical — controls access to other accounts

Cloud Backup

Available via Microsoft account

Passwordless

May be used for passwordless sign-in

Work Accounts

May include employer SSO accounts

Step-by-Step Guide

1

Keep the phone active and charged

Microsoft Authenticator codes are on the phone. Do not reset or erase it. The phone is the key to all accounts using this app for 2FA.

2

Check for cloud backup

Microsoft Authenticator can back up credentials to iCloud (iOS) or a Microsoft account (Android). If backup was enabled, credentials can be restored to a new device.

3

Handle work/employer accounts separately

If Microsoft Authenticator includes work accounts (Entra ID/Azure AD), contact the deceased's employer IT department for those accounts.

4

Contact platforms for 2FA removal

For each locked account, contact the platform's support with a death certificate to request 2FA removal or alternative verification.

Document Now Checklist

  • Phone the app is installed on
  • Cloud backup enabled (yes/no)
  • Microsoft account email
  • List of accounts using this for 2FA
  • Work/employer accounts included (yes/no)

Last verified: June 2026. Platform policies may change. Verify current procedures directly with Microsoft Authenticator. This guide is for informational purposes only and does not constitute legal advice.

Protect your Microsoft Authenticator account — and all your others

Document your digital life in a zero-knowledge encrypted vault. 1,800+ platform guides. Dead Man's Switch. Everything your family needs.

Start your free trial →