Authenticator Code Rejected Once? Fix It
A single rejected authenticator code is usually a clock or timing problem, not a broken account. Authenticator codes depend on the device clock, so a clock even a minute off can make a valid-looking code fail.
TL;DR / Quick Fix
Quick fix: confirm the device clock is set automatically, wait for a fresh code to appear, and enter that current code once. If it still fails, check you are using the right account entry in the app. Last, use a backup option if it still fails to confirm it.
Follow these steps
- Check the device clock first. Open date and time settings and confirm the clock is set automatically. A clock that is off by a minute or more makes authenticator codes invalid.
- Wait for a fresh code. Wait for the app to show a new code, then enter that code promptly. A code near the end of its short life can expire while you type it.
- Enter the code once, carefully. Type the current code once, without spaces, and submit. Repeated guesses with old codes can trigger a temporary lock.
- Check you picked the right account entry. Confirm the app entry matches the site and account you are signing in to. Similar entries for the same service are easy to confuse.
- Resync the app time if offered. Some authenticator apps offer a time correction or sync option in settings. Use it if the clock is automatic but codes still fail.
- Use a backup option if it still fails. If the fresh code still fails, use a backup code or another verification method the site offers, then fix the clock before the next sign-in.
What NOT to do
- Do not reuse a code that already worked. Each authenticator code works once, and a reused code always fails.
- Do not delete the authenticator entry to fix one rejection. Deleting it removes the account, and recovery is much harder.
- Do not share an authenticator code with anyone. A real support agent never asks for it.
- Do not turn off two-factor authentication after one rejection. Fix the clock, which is the usual cause, and keep the protection.
Frequently asked questions
Why was my code rejected only once?
A clock drift, an expiring code, or picking the wrong account entry can each cause a single rejection.
How long does an authenticator code last?
Usually about thirty seconds, so enter the current code promptly rather than one that is about to change.
What if every code fails?
Then check the clock and the account entry first, and use a backup code while you fix the setup.