Move Google Authenticator & 2FA Before a Phone Repair

A wiped phone with your only Google Authenticator copy is how people lose Gmail for a week — and then discover their bank recovery SMS still points at a dead handset. Move 2FA before the shop. This is not optional hygiene; it is part of the repair.

Pair this with the full pre‑repair checklist and WhatsApp backup.

Step 0 — inventory

List accounts that need the app. Priority order:

1. Primary email
2. Apple ID / Google / Microsoft
3. Banking / PayPal / brokerages
4. Work SSO / VPN / password vault
5. Social, shopping, everything else

If email dies, everything else gets harder. Start there.

Google Authenticator transfer

1. Open Authenticator → menu → Transfer accounts → Export.
2. Scan with Authenticator on a spare phone (or migrate into a password manager that supports TOTP).
3. Verify a code works on the new device for a low‑risk site first.
4. Only then accept factory‑reset risk on the repair phone.
5. Keep both devices until you confirm critical logins.

Other authenticator apps

Authy, 1Password, Bitwarden, Microsoft Authenticator, Proton Pass — use each vendor’s official backup/transfer. Prefer encrypted cloud backup with a strong password over “no backup for security” if you repair phones often.

Do: official export / multi‑device features.
Don’t: photograph every QR on a café table and upload the album to an unlocked shared Drive folder.

Recovery codes (non-negotiable)

For each critical site, download backup/recovery codes and store them:

• Printed in a drawer, or
• In a password manager secure note

Camera Roll screenshots alone are weak (they leave with a lost phone). If you already use SMS as backup, confirm the number still works on a spare SIM/eSIM plan.

Same-day repair without a spare phone

1. Add SMS or second factor temporarily on email.
2. Print recovery codes for Google/Apple/Microsoft and your bank.
3. Accept that some app‑only accounts may need recovery after wipe.
4. Do not give the shop your authenticator passcodes “so they can test Face ID.”
5. Prefer supervised diagnostics over leaving the phone unlocked with banking widgets visible.

Android FRP and Apple Activation Lock angle

2FA migration ties into account locks:

• Android wipes → FRP needs the Google account you can still enter.
• iPhone board work may require Find My decisions — still keep Apple ID 2FA reachable without the dead handset.

A password manager with TOTP + printed recovery codes is the boring setup that survives both ecosystems.

After the phone returns

1. Reinstall authenticator apps from the official store only.
2. Transfer accounts back if desired — or keep them in the password manager permanently.
3. Remove temporary SMS factors you no longer want.
4. Review account “recent security activity.”
5. Change passwords if the shop had unlock access for testing.

Shop vs DIY

Task	You	Shop
Export authenticator	You	Never their job
Hold recovery codes	You	Do not hand them over casually
Test biometrics	Shop with you present	Without your banking OTP apps open

Biometric repairs are optional. Account access is not.

Do / Don’t

Do

• Dual‑enroll before drop‑off
• Test a login on the spare device
• Keep recovery codes offline

Don’t

• Leave Authenticator unlocked on the bench
• Email yourself a sheet of live codes in plain text
• Assume “screen‑only” jobs never wipe

Special cases

• Crypto / exchange accounts: treat seed phrases and authenticator moves with extreme care; prefer official app transfer flows; never type seeds into a shop PC.
• Work phones / MDM: ask IT before exporting; some corporate authenticators are not personally portable.
• Dead phone already: stop reading migration steps and start recovery codes + provider account recovery on a computer.

Password manager TOTP migration pattern

If you are moving from app‑only Authenticator to a password manager:

1. For each critical site, open security settings.
2. Add a new TOTP factor from the password manager QR (or migrate if the site allows multiple).
3. Confirm codes match.
4. Only then remove the old authenticator factor.
5. Keep recovery codes until you trust the new setup for a week.

Never remove the old factor before the new one produces a working code.

Crypto and high-risk accounts

Exchanges and wallets can be unforgiving. Prefer official app transfer flows. Never type seed phrases into a shop computer “so they can help.” If a device is already dead, use pre‑printed recovery — not improvisation at a repair counter.

Work MDM authenticators

Company‑issued authenticators may be non‑exportable. Ask IT for a temporary bypass or hardware key before repair. Personal and work factors should not share a single fragile phone without backup.

Paper backup drill (15 minutes)

1. Print recovery codes for Google, Apple, Microsoft, and your bank.
2. Store in a sealed envelope at home — not in the phone case.
3. Confirm one code works on a secondary login test where safe.
4. Tell a trusted person where the envelope lives if you travel for repair drop‑off.

Boring? Yes. Effective when the phone never returns from water damage? Also yes.

Extra practical notes for stubborn cases

When Move Google Authenticator & 2FA Before a Phone Repair still misbehaves after the main checklist, slow down and change only one variable at a time. Techs lose hours when owners toggle ten settings, install three cleaners, and then cannot remember what actually helped.

One-variable testing

1. Write the current symptom in one sentence.
2. Apply a single change from the guide.
3. Reboot if the change requires it.
4. Retest the same sentence.
5. Log pass/fail with time of day and network type (Wi‑Fi vs LTE vs 5G).

This notebook habit turns guesswork into a short diagnostic record you can hand to a shop.

Environmental factors people skip

Heat, low battery, full storage, and captive‑portal Wi‑Fi create ghost failures around 2FA, Google Authenticator, TOTP, repair. Test again in a cool room, above 20% battery, with a few GB free, on known‑good power. If the fault vanishes under those conditions, you found constraints — not a mysterious hardware curse.

Notes before you spend money

• Ask whether the shop warranty covers the function you lost, not only that a part is installed.
• Keep receipts and screenshots.
• Prefer official OS updates and official app stores over random APKs and “fixer” profiles.
• Back up before invasive steps — every time.

Accessibility and human factors

If someone else uses the device (parent, child, colleague), confirm they did not enable Screen Time restrictions, guest accounts, or work profiles that change menus. Many “settings disappeared” tickets are permission layouts, not broken radios or sensors.

Bottom line

Move TOTP off the patient before surgery. Export, verify, print recovery codes, then hand over the handset. The best screen repair in town is worthless if you cannot open the email that owns your digital life.