An authorisation code is valid for 14 days from the date it is generated. It can only be used once and will also become invalid if a new code is generated during its validity period.
However, in exceptional circumstances, Registry Services may invalidate authorisation codes issued by registrars, for example when a Registrar Agreement is terminated.