Google Drive verification codes expire in 10 minutes

A Google Drive verification code — the six-digit number Google sends to your phone or email when you sign in from a new device — is valid for 10 minutes from the moment it arrives. If you don't enter it within that window, the code stops working and you'll need to request a new one.

The 10-minute window is the same whether you receive the code by text message, through the Google Authenticator app, or via email. Google sets this timing to balance security (a short window limits the damage if someone intercepts the code) against practicality (10 minutes is enough time for most people to find their phone and type the number).

If your code expires before you use it, you don't lose access to your account. You straightforward request another code on the same sign-in screen, and Google will send a fresh one with a new 10-minute countdown.

Key Takeaways

  • Verification codes are good for exactly 10 minutes from when Google sends them, whether by text, email, or authenticator app.
  • An expired code doesn't lock you out — you can request a replacement code on the same sign-in page without penalty.
  • The 10-minute limit applies to all verification methods Google offers, including backup codes (which don't expire but are single-use).
  • If you're signing in from a trusted device, Google may skip the verification code step entirely on future sign-ins from that same device.

Why Google uses a 10-minute expiration

The 10-minute window is a security standard across most major services. A code that stays valid for hours or days gives a bad actor more time to use it if they intercept it — through a phishing email, a compromised network, or a stolen phone. A code that expires in seconds would frustrate legitimate users who step away from their phone or take time to locate it.

Ten minutes sits in the middle: long enough that you can receive a text, find your device, and type six digits without rushing, but short enough that an intercepted code becomes useless quickly. If someone steals your code at minute 8, they have only 2 minutes to use it before it dies.

What happens if your code expires

When 10 minutes pass without you entering the code, Google's system straightforward rejects it. The sign-in screen will show an error message saying the code has expired or is invalid. You won't be locked out of your account — you'll see a button or link to request a new code, usually labeled "Didn't get your code?" or "Send a new code."

Requesting a new code takes seconds. Google will send another six-digit number to the same phone number or email address, and your new 10-minute countdown begins. You can request as many new codes as you need without triggering any security lockout or account review.

Backup codes don't expire but work only once

Google also offers backup codes as an alternative to text or email verification. These are a set of 10 single-use codes that Google generates when you first turn on two-factor authentication. Unlike time-based codes, backup codes have no expiration date — you can use one months or years after you received it.

The trade-off is that each backup code works only once. After you use a code to sign in, it's gone and can't be reused. This makes backup codes useful for emergencies (like when you've lost access to your phone) but impractical for regular sign-ins. Most people save their backup codes in a password manager or write them down and store them somewhere safe, then use them only if their primary verification method fails.

How to avoid expired codes during sign-in

The simplest way to avoid the expiration problem is to have your phone or email open before you start signing in. If you know you're about to sign in from a new device, pull up your messages or email app first so the code is visible the moment it arrives. Then switch to the sign-in screen and enter it when ready.

If you're signing in on the same device that receives the code (for example, signing into Google on your phone and receiving the code via text on that same phone), you can usually copy the code from the notification without leaving the sign-in screen. Most phones let you tap the notification to copy the code to your clipboard, then paste it into the verification field.

Another option is to mark your device as trusted after you sign in. Once you've entered a valid code and reached your account, Google will ask if you want to trust that device for future sign-ins. If you say yes, you won't need a verification code the next time you sign in from that same computer or phone — Google will recognize it automatically.

Verification codes on shared or public devices

If you're signing into Google Drive on a shared computer (at work, at a library, or at someone else's home), do not mark the device as trusted. Trusting a shared device means anyone who uses that computer afterward can sign into your Google account without needing a code. Always let the code expire or manually close the "trust this device" prompt on shared machines.

On a public device, the 10-minute expiration actually works in your favor. Even if someone sees your code arrive, they have only 10 minutes to use it before it becomes worthless. Once you've signed in and finished your work, sign out completely — don't just close the browser tab.

Frequently Asked Questions

Can I use a verification code after it expires?

No. Once 10 minutes pass, the code is invalid and Google's system will reject it. You'll need to request a new code on the sign-in screen. There's no way to extend or reuse an expired code.

What if I request a new code but the old one hasn't expired yet?

Google will send you a new code, and the old one becomes invalid when ready. Only the most recent code works. This prevents confusion if you accidentally request multiple codes in a row.

Do backup codes expire?

No. Backup codes never expire and remain valid indefinitely. However, each code can only be used once. After you use a backup code to sign in, it's consumed and can't be used again.

If I'm slow at typing, can I ask Google for more time?

No, the 10-minute window is fixed and can't be extended. If you need more time, request a new code before the first one expires. You can request as many codes as you need without penalty.

Does the expiration timer pause if I switch apps or tabs?

No. The 10-minute countdown runs continuously from the moment Google sends the code, regardless of what you're doing on your device. Switching between apps, tabs, or windows doesn't pause or reset the timer.