Two-factor codes are rejected

Last updated Aug 30, 2026

TOTP codes depend on clock accuracy. Ask the customer to enable automatic time on their device. If they have lost the device, a recovery code is the only self-serve route; without one, identity has to be verified by a human.

Was this article helpful?

Still stuck?

Send us the details and a person will pick it up.

Submit a request

Webhook deliveries stoppedWe retry a failing endpoint five times with backoff, then mark it failed and stop.Troubleshooting
Export or download failsLarge exports are generated in the background and emailed as a link that expires after 24 hours.Troubleshooting
Cannot sign in after a password resetAlmost always a cached session. Ask the customer to sign out fully, clear site data, and use the newest reset link — older links are invalidated the moment a newer one is requestedTroubleshooting

Was this article helpful?

Still stuck?

Related articles