Tap the + button and scan the QR code shown by the service you’re securing. No QR code? Choose “Enter setup key” and paste the secret key the service provides.

Create an encrypted backup on your old device, then restore it on the new one using the same encryption key. Your codes come across exactly as they were.

Enable “Require Passcode” in Settings to lock the app behind Face ID or your device passcode. You can choose how quickly it re-locks.

Make sure your device’s date and time are set automatically. TOTP codes depend on an accurate clock, and a few minutes of drift can cause codes to be rejected.