SMS/Phone 2FA: This issue may occur if SMS code is delivered late and has already expired. If late delivery takes place, please try using phone call option for some time. Most of the time late deliveries are resolved by SMS/Phone providers in a matter of hours. If the issue persists please contact support via firstname.lastname@example.org.
Google Authenticator: Invalid tokens are caused by incorrect device clock settings. Your clock must show correct local time, date and time zone to work properly. Android and Windows phones have an option to correct for time errors inside the Authenticator app properties, if you do not wish to sync your clock. IPhones must be set to use internet time to make sure the clock is synced properly.