Why is my verification code saying "Invalid" when I type it in?

If you are entering a 6-digit code from your authenticator app and receiving an "Invalid code" error on the login screen, it is usually due to a time sync issue on your mobile device.

Time-Based One-Time Password (TOTP) apps generate new codes every 30 seconds based on the exact current time. If your mobile phone's internal clock is slightly fast or slow - even by just 30 to 45 seconds - the codes it generates will not match the GCC system server, causing an error.

How to fix this issue:

1. Check your phone's date and time settings:
   
   Go into your device's system settings (iOS or Android) and ensure your clock is set to Set Automatically or Automatic Time Zone. If it is set manually, toggling the automatic setting off and on again will usually re-sync your clock.
   
   

2. Wait for a fresh code:
   
   Codes expire quickly. If the timer circle in your app is about to run out, wait a few seconds for a newly generated code before typing it into the GCC verification box.
   
   

3. Check you are using the correct account:
   
   If you use the Duo or Google Authenticator app for multiple different websites, make sure you are looking at the 6-digit code labeled with your GCC username and not a code for another service.

Still having trouble?
If your clock is synced and the codes are still failing, select I don't have my device on the verification screen to log in via email authentication. Once logged in, navigate to your Multi-factor authentication preferences page, click Revoke on your existing device, and set it up again from scratch.