It must be called two-factor authentication because the app never works the first time.