How long is the emailed two-factor code valid?

A login code sent by email is valid for 5 minutes. After that it stops working, even if it was never used.

If the code arrives late or has expired, click Resend code on the Verify it’s you screen and use the newest email. Older codes will not work.

If email delays keep happening, set up an authenticator app instead. Go to Account → Security, click Set up on the Authenticator app card, and follow the steps. App codes are made on your phone, so you are not waiting for an email. You can keep both methods on and use whichever is handy.