Check the time settings on your phone
The most common cause of a rejected verification code is an incorrect time on your phone. Verification codes are time-based: if your phone's clock is even slightly out of sync, your authenticator app will generate codes that are no longer valid.
Go to your phone's settings.
Set the date and time to 'Set automatically' (or something similar).
Open your authenticator app and wait for the codes to refresh.
Try logging in again.
Try a new code
Every verification code is only valid for a short time, usually 30 seconds. Wait in your authenticator app until a new code appears and enter it immediately. Make sure you are using the code for the correct account: if you use the authenticator app for multiple systems, there will be multiple codes listed.
Restart the authenticator app or your phone
Are you still seeing the message The code is incorrect? Close the authenticator app completely and reopen it. If that does not help, restart your phone and try again.
Logging in without the authenticator app
Are you unable to enter a working verification code in any way, for example because you do not have your phone with you or the app has been deleted? Click 'Try another way' below the verification code input field. In addition to logging in with 2FA, you then have two other options:
Have you added a phone number in your account settings? You can then receive an SMS with a backup code on that number.
You can also use one of the recovery codes you received when setting up 2FA. Please note: each recovery code can only be used once.
Once logged in, immediately set up your two-factor authentication again so you can log in with your authenticator app next time.
Read more: How do I log in securely with 2FA?
Still not working?
If you are still unable to log in after trying the solutions above, please contact our service desk.
Please note: an administrator within your own organisation cannot reset two-factor authentication for you. This can only be done via the service desk. We will always first verify your identity through various channels before removing the two-factor authentication from your account. You can then log in again and set up 2FA anew.