Authenticator login: how to sign in with an authenticator app
SHORT ANSWER
How do I log in with an authenticator app?
Sign in with your username and password, then open your authenticator app, find the account and type the current six-digit code into the site before the 30-second countdown ends. If the code is rejected, check your phone's clock, that you picked the right account, and that the code has not expired.
Key takeaways
- An authenticator login has two steps: your password, then a code from the app.
- Codes change every 30 seconds. Type the one on screen now, and press enter before it changes.
- Most rejected codes come from a wrong phone clock or the wrong account entry.
- Keep recovery codes from the site. They are your way in if the phone is lost.
What an authenticator login is
An authenticator login is two-step verification: something you know (your password) and something you have (your phone with the app). After the password, the site asks for a six-digit code. The app makes that code from a secret you shared with the site when you set it up, and the site makes the same code on its side to compare.
Set it up once
- Sign in to the site and open its security or two-step verification settings.
- Choose an authenticator app. The site shows a QR code and sometimes a text key.
- In your app add an account and scan the QR code. If you cannot scan, type the text key by hand.
- Type the code the app now shows into the site to confirm.
- Save the recovery codes the site shows. Store them offline.
Log in every time
- Enter your username and password.
- When the site asks for a code, open the authenticator app and find the entry for that site and account.
- Type the six digits without spaces. Watch the countdown: if it is nearly out, wait for the next code.
- Press Sign in. Many sites let you tick a box to trust this device for a while.
If the code is rejected
| Cause | What to do |
|---|---|
| The phone's clock is wrong | Turn on automatic date and time in Android or iOS settings. Codes depend on the time. |
| Wrong account entry | You may have several entries for one site. Check the account name under the code. |
| The code expired while you typed | Wait for the next code and type it straight away. |
| Typed a space or letter | Codes are digits only. Some apps show a space in the middle that you must not type. |
| Counter-based account | A few sites use counter codes. Refresh the code in the app and try the new one. |
| Account was moved or re-added | Re-adding an account on a site creates a new secret. The old entry in your app stops working. |
If you cannot sign in at all
- Use one of the recovery codes the site gave you when you set up the app.
- Use another method you added, such as a passkey or a second device.
- Follow the site's account recovery, which may take time and proof of identity.
More in what to do if you lose your phone.
Logging in with push approval instead of a code
Some apps, such as Microsoft Authenticator for Microsoft accounts, can send a notification that you approve, sometimes by choosing the number shown on the sign-in screen. That is a separate method from typing a code, and it only works with the sites that support it. See Microsoft Authenticator.
Frequently asked questions
Why does my authenticator code not work?
Most often the phone's clock is off, the code has just expired, or you picked the wrong entry. Turn on automatic time and try the next code.
Do I need internet to see the code?
No. The app makes the code on the phone. You need internet only to reach the site you are signing in to.
Can I log in without my phone?
Use a recovery code or another method you set up. Without either you must go through the site's account recovery.
How often does the code change?
Usually every 30 seconds, shown by the countdown next to it.
References
Review status
Last technical self-review by the author on 4 October 2026. No independent reviewer yet. If you spot an error, write to [email protected] and we will correct it and note the change.
Rohan builds HostSpica's Android apps — Authenticator, Passkey and Identity — and writes up how they work, including the mistakes along the way.
ABOUT THE PRODUCTS
RELATED