diff --git a/roles/totpcgi/templates/provisioning.conf.j2 b/roles/totpcgi/templates/provisioning.conf.j2
index ae2f4e7ddf..bc953a9dc0 100644
--- a/roles/totpcgi/templates/provisioning.conf.j2
+++ b/roles/totpcgi/templates/provisioning.conf.j2
@@ -10,7 +10,7 @@ encrypt_secret = False
 # You can allow for some clock drift between the client and server by setting
 # the permitted window size. Window size is calculated in 10-second intervals,
 # so a window size of 6 allows clock drift of 60 seconds in either direction.
-window_size = 3
+window_size = 6
 
 # First value is the number of times. Second value is the number of seconds.
 # So, "3, 30" means "3 falures within 30 seconds"