Try this first
- Use the newest authenticator code
- Check device time is automatic
- Avoid spaces when typing the code
- Use resend or backup path if available


Admin/support path
- Confirm the user identity before resetting 2FA
- Review audit logs for suspicious login attempts
- Ask another admin to help if the only admin is locked out