### Steps to reproduce

1. Login as a user
2. Go to My Account -> Two-factor authentication
3. Click on "+", "Register device"
4. Scan the qr code with a mobile device (using bitwarden as password application)
5. enter the generated TOTP Code

### What is the buggy behavior?

Token is not accepted

_<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/46598/content">_

### What is the expected behavior?

The token should be Begin of the insertionaccepted.End of the insertion Begin of the deletion acceptedEnd of the deletion

Begin of the insertionClock skew is causing the drift to not be acceptable.

End of the insertion ## Additional Information

otpauth path looks like this (removed sensitve Begin of the insertioninformation):End of the insertion Begin of the deletion information): End of the deletion

`otpauth://totp/MYCOMPANYNAME%20OpenProject:mburk?secret=1234&issuer=MYCOMPANYNAME%20OpenProject`

### Environment information

_Please check and fill out the following details to help us identify in what versions and distributions of OpenProject the error occurs_

**OpenProject installation type**

* [x] Packaged installation
* centOS

**OpenProject version**

v12.4.0 (Community Version)

**Browser**

* [x] Chrome

**Language**

German