When you sign in to Hum, you may be asked for a 6-digit code from an authenticator app (like Microsoft Authenticator or Google Authenticator). If the Hum log in page keeps saying the code is invalid, try the steps below.

Before you start

  • Make sure you’re entering the latest 6-digit code (they change every ~30 seconds).

  • If the code is about to change, wait for the next one and enter that instead.

Step 1: Sync the time on your phone (most common fix)

Authenticator codes rely on your phone’s clock. If your phone time is slightly off, codes won’t work.

On Android:

  1. Open Settings

  2. Go to Date & time

  3. Turn ON:

    • Set time automatically

    • Set time zone automatically

  4. If they’re already ON, switch them OFF → ON again

  5. Restart your phone

On iPhone:

  1. Settings → General → Date & Time

  2. Turn ON Set Automatically

  3. Restart your phone

Then try signing in again.

Step 2: Remove Hum from your authenticator app and set it up again

If syncing time didn’t fix it, start fresh.

  1. Open your authenticator app

  2. Find the Hum entry (for example it may be labeled with your email or your organization)

  3. Delete/remove that entry

  4. Go back to Hum and start the sign-in flow again so you can scan the QR code again

  5. Enter the new 6-digit code

Important: Only use one authenticator app while you do this (don’t switch between apps mid-setup).

Step 3: Try a desktop authenticator (if your phone won’t work)

If your phone keeps rejecting codes even after time sync + re-setup, you can use a desktop password manager that supports authenticator codes (TOTP), such as LastPass Authenticator (or similar tools).

This can help if the issue is specific to your phone’s time sync or authenticator app behavior.

Step 4: If it still doesn’t work, contact help@hum.works for an MFA reset

Sometimes an account needs an MFA reset so you can set it up again cleanly.

When you contact help@hum.works, share:

  • The exact message you see (for example “Invalid code”)

  • The authenticator app you’re using (Microsoft Authenticator / Google Authenticator / etc.)

  • Your phone model + whether it’s Android or iPhone

  • A screenshot of the error (but do not include the QR code)

Security note: Never send a QR code or setup key. Those can be used to generate valid login codes.