2FA Troubleshooting - Invalid TOTP Code

2FA Troubleshooting - Invalid TOTP Code

 

🔄 What is a TOTP Code?

  • TOTP stands for Time-based One-Time Password.

  • It generates a new 6-digit code every 30 seconds based on:

    • A secret key shared during setup.

    • The current timestamp on your device.


 

🚫 Reasons You Might See “Invalid TOTP Code”

  1. Time Desynchronization:

    • The time on your phone (or TOTP-generating device) is not in sync with internet time.

    • Solution: Enable automatic time sync (NTP) in your device settings.

  2. Incorrect Code Entry:

    • You mistyped the code or used an expired one.

    • Solution: Try again quickly before the code refreshes.

  3. Wrong Account Selected:

    • If your authenticator app has multiple accounts, you may have picked the wrong one.

    • Solution: Double-check the label on the app and use the correct entry.

  4. Authenticator App Misconfigured:

    • The shared secret (QR code or manual key) was entered incorrectly when you first set it up.

    • Solution: Remove and re-add the account, if allowed by the service.

  5. Clock Drift on Server or Device:

    • Rarely, the authentication server's clock may be off.

    • Solution: Contact support if the issue persists across devices.

 


🛠️ How to Fix It

  • Sync your device clock with internet time.

    • On iOS: Settings > General > Date & Time > Set Automatically

    • On Android: Settings > System > Date & Time > Use network-provided time

  • Try a different device if possible to see if it’s device-specific.

  • Reinstall or reset the authenticator app (only if you still have recovery options).