DSM rejects the correct six-digit verification code. Could the time be wrong?

QUICK ANSWER

Time-based verification needs the phone and NAS clocks to agree. First confirm you are using the code for this DSM account, then check automatic time synchronisation. Repeated guesses can trigger account protection.

Applies to: Local DSM two-factor authentication with an authenticator app; Synology Account recovery is a separate process.

Work through these checks

  1. Confirm the NAS address, username and authenticator entry. A similarly named Synology Account entry is not necessarily the secret registered for your local DSM login. Use a fresh code before it expires.
  2. Check automatic date and time on the phone. If an authorised administrator still has a valid DSM session, ask them to check Control Panel > Regional Options > Time and the NAS’s NTP synchronisation.
  3. A time-zone label alone is not proof of accurate time. Compare actual clock time and synchronisation status. Correct the source of clock drift rather than repeatedly entering codes or manually moving the clock backwards.
  4. If access is still unavailable, use the recovery method previously configured for that account, or ask another authorised administrator to follow the documented account-recovery procedure. Keep recovery codes and QR secrets private.

Confirm the result

A fresh code for the correct DSM account succeeds and subsequent codes continue to work with normal automatic time settings.

Before going further: Do not factory-reset the NAS, disable two-factor protection for everyone or delete the authenticator entry before preserving account recovery access.

If you need help

Include these details in your ticket: DSM and authenticator versions, exact redacted error, phone/NAS time comparison and available recovery method.

Updated 261107

Please Wait!

Please wait... it will take a second!