MFA SMS Authentication Codes/Period

Overview

This article explains why the same code is sent when pressing resend on the login flow during SMS MFA Authentication.

Solution

Every code issued will be exactly the same for the next 5 minutes from the first time it is issued since the code sent the first time is linked to a fixed period.

A new code inside the 5-minute interval cannot be generated.

After the 5-minute period, if the user presses the resend code button, a new code will be generated, and the process will apply again.