Google Authenticator can hand your 2FA codes to a new phone offline, no cloud needed, using a built-in QR export. The catch is the order: do it before you wipe the old phone, and know where the export trips people up. Here is the safe, step-by-step way to move your codes.
