How Long Is an OTP Valid?

Most OTPs are valid for 1 to 10 minutes and for one use only. Authenticator codes change every 30 seconds. After that, ask for a new code.

Typical validity

The app decides, so the exact time varies. Many texts state it, for example "expires in 10 minutes".

Why codes expire so fast

A short lifetime limits the damage if someone sees or guesses a code. A code that works once and only for minutes is useless to an attacker who finds it later.

When an OTP says it has expired

1. Ask for a new code.
2. Use only the newest code: older codes usually stop working when a new one is sent.
3. Enter it promptly; do not switch apps for long.
4. For authenticator codes, check your phone's date and time are set automatically.

Do not ask too often

Each request counts toward a limit. After several, many apps make you wait, sometimes for hours. If a code is slow, wait a minute or two before asking again.

Why some codes still work after expiry

Occasionally a code works a little after the stated time, because the server allows for slow networks. Do not rely on it. Equally, a code may stop working early if you asked for a new one, signed in elsewhere, or used it once already. If an OTP fails, the quickest fix is always a single fresh request, followed by entering that code within a minute or two.

FAQ

Can I use the same OTP twice?

No. An OTP works once. Ask for a new one if you need to sign in again.

Why does my new code say invalid?

You may be entering an older code, or the code expired while you switched apps. Use the most recent one.

Why are authenticator codes rejected?

Usually your phone clock is wrong. Turn on automatic date and time.

Related: what an OTP is · authenticator apps · WhatsApp wrong code.