What is a common client misconception regarding the *validity periodof a TOTP, and how should an FAQ definitively clarify it?

A common client misconception regarding the validity period of a TOTP is believing that a generated code remains valid for the entire duration it is displayed on their authenticator application, or that its validity begins when they view it. Clients often interpret the countdown timer next to the code as the remaining time they have to use *that specific code*, rather than the remaining time until a *new codeis generated and the current one expires. This leads to confusion when a seemingly still-visible code is rejected by the server because the underlying time window has elapsed.