This is why you always write down the private key portion of the authenticator token when signing up with each site.