Google Account 2FA Not Working

What Does This Error Mean?

Google 2-Step Verification fails when SMS codes are delayed, the authenticator app clock is out of sync, or you have lost access to your second factor device. This can lock you out of your entire Google account including Gmail and Drive. Backup codes saved when you set up 2FA are the fastest way back in if your primary method fails.

Affected Models

All Google accounts
Gmail Web
Gmail iOS App
Gmail Android App
Google Workspace

Common Causes

SMS verification codes delayed or not delivered by your carrier
Authenticator app time is out of sync, causing codes to be rejected
Lost or replaced phone with no access to the original authenticator app
Phone number changed and the old number no longer receives SMS
Google Prompt not appearing because the authenticator device is offline or app is outdated

How to Fix It

Check if you have backup codes saved — Google generates 10 one-time codes when you set up 2FA.

Backup codes are the fastest recovery option and each one can be used exactly once to sign in without your phone.
If using an authenticator app, check that your phone time is set to automatic in phone Settings > General > Date and Time.

Authenticator codes are time-based and expire every 30 seconds — even a 1-minute clock drift causes all codes to fail.
If codes are not arriving by SMS, try requesting the code again and wait up to 5 minutes, as carrier delays are common.

Congested carrier networks can delay SMS by several minutes — do not request multiple codes quickly as it locks the SMS delivery temporarily.
Try switching to a different 2FA method by clicking Try another way on the Google sign-in screen.

Google offers multiple fallback methods — Google Prompt, SMS, authenticator app, and backup codes — so switching to another may work.
If you cannot get in at all, go to accounts.google.com/signin/recovery and follow the account recovery steps.

Recovery works best from a familiar device and location — Google uses your sign-in history to verify your identity.

When to Call a Professional

If all 2FA methods fail and you have no backup codes, use the account recovery form at accounts.google.com/signin/recovery. For Google Workspace accounts, your administrator can bypass 2FA and reset your login directly. If your phone was stolen and your account is at risk, use account recovery to lock out the attacker immediately.

Frequently Asked Questions

I got a new phone — how do I transfer my Google authenticator codes?

Google Authenticator has a Transfer Accounts option in its menu that lets you move all codes to a new phone by scanning a QR code. Do this before wiping your old phone — if you have already reset it, use backup codes or account recovery instead.

Why is Google rejecting my authenticator code when it looks correct?

Authenticator codes are time-sensitive and only valid for 30 seconds. If your phone clock is even slightly off from real time, the codes will be rejected — set your phone clock to automatic to fix this.

How do I disable 2FA if I am locked out of my account?

You cannot disable 2FA without first getting into the account. Use backup codes or account recovery to sign in, then go to myaccount.google.com > Security > 2-Step Verification to manage or remove it.