Authenticator Transfer: Cloud Sync vs Manual Export in Google's Two-Factor App

Google Authenticator is one of the most popular two-factor authentication apps worldwide, and its cloud sync feature has made it easier to transfer codes between devices. However, as of August 2026, this convenience comes with a security trade-off: synced codes are not end-to-end encrypted.

The app's developer, Google, has committed to adding encryption but has not shipped it yet. In the meantime, users can opt for the manual QR export method, which keeps every secret off Google's servers entirely.

Transferring Authenticator codes requires careful planning and attention to detail. Users need to ensure they have the latest version of the app (Android 7.0 or later, iOS 4.0 or later), a working internet connection, and backup codes for their Google Account.

The process itself takes around 60 minutes, with 20 minutes spent backing up and syncing codes, 20 minutes setting up the new phone, and 20 minutes verifying every account before wiping the old device.