Authenticator codes become invalid 6-7 minutes after they have been generated and can only be used once. Using a code after it has expired or after having used it once before will cause the system to display the Incorrect Token Used message.