Authenticator codes not working? The fixes, in order
Your authenticator shows a code, you type it, and the site says it's invalid. That doesn't usually mean the account is lost. Work down this list.
1. Fix the clock
Time-based codes are calculated from the current time, usually in 30-second steps (RFC 6238). If your device's clock is wrong, your app and the site disagree about which code is current. Google's Authenticator help says to check that "the time on your device is synced and correct for your local time zone" (Google's Authenticator help page).
- Windows: Start, then Settings, then Time & language, then Date & time. Turn on Set time automatically and Set time zone automatically (Microsoft's time settings help).
- Mac: System Settings, then General, then Date & Time. Turn on Set time and date automatically (Apple's date and time help).
- Phone: turn on automatic date and time in your phone's settings.
Then wait for a fresh code and try again. Never Lose Codes makes codes from your computer's clock, so this applies to it too.
2. Type the code while it's fresh
If the code changes while you're typing, the old one may be rejected. Wait for a new one and type it right away. In Never Lose Codes, click a code to copy it, then paste it into the site.
3. Make sure it's the right account
If you have two entries for the same site, for example work and personal, or an old entry from an earlier setup, you may be using the other one. Google's list of checks includes using "the correct app or service" and "the correct Google Account" (Google's Authenticator help page). Try each entry for that site.
4. Was 2FA set up again on that site?
Each time you set up an authenticator on a site, the site makes a new secret. The old entry keeps showing codes, but the site no longer accepts them. If no entry works, sign in with one of the site's recovery codes (Google's are described on Google's backup codes page) and set up the authenticator again.
5. Only one site fails, every time
If the entry was added by typing a setup key, a typo is possible. Set up 2FA again on that site and add it by scanning the QR code instead.
Still stuck?
Use the site's other sign-in options, like a text message, a security key or a recovery code. Once you're in, set up the authenticator again. If you've lost access to your codes entirely, see Lost your authenticator codes? What to do now.
Never Lose Codes is a Chrome extension that keeps your 2FA codes encrypted on your computer, with backup files you hold and a recovery key. See how it works.