In plain English
Some codes can only be used for a limited time. Once that time window ends, the code is expired. After that, it cannot be used anymore.
In context
Here, "expired code" reports that the entered MFA code was rejected because its allowed time for use had already ended.
- Situation
- Setting passwords, multifactor authentication, recovery codes, and trusted devices
- What it communicates
- reports why the entered MFA code was rejected
Meaning limits
By itself, the term does not say when the validity period ended or why the code was entered after that point.
Examples
“At noon the entry code still worked, but by evening it was an expired code.”
“When she entered the six-digit number, the app rejected it as an expired code.”