Errors / invalid_second_factor

That code is not right

HTTP 401authenticationinvalid_second_factor

The authenticator code or recovery code was wrong, already used, or expired.

What to do

Codes change every 30 seconds and each works once, so wait for the next one. Check the clock on your phone. After five wrong codes you have to enter your password again. A recovery code works exactly once.

What it looks like

{
  "error": {
    "type": "authentication",
    "code": "invalid_second_factor",
    "message": "…",
    "doc_url": "https://docs.textmast.com/errors/invalid_second_factor",
    "request_id": "req_01j8xk2p7n4qc3m9v0wz5bt6ay"
  }
}

Quote the request_id if you get in touch. It is on every response, including this one, and it turns a support email into a single log query rather than an archaeology exercise.