Security

TOTP Generator

Generate one-time codes locally for setup and debugging.

Local-only

Enter a Base32 secret to generate the current TOTP code.

Secret
Not loaded
Config
SHA-1 / 6 digits / 30s

Advanced settings

Only change these values when your issuer does not use the default TOTP settings.

Saved keys

Saved keys are stored in localStorage for this browser only. Avoid saving production credentials on shared devices.

Saved keys stay in this browser only.

Usage notes

  • By default, secrets stay in memory only. You can explicitly enable local persistence on this device.
  • Use otpauth URIs to prefill issuer, account, period, digits, and algorithm.
  • Authenticator apps often expect 30-second / 6-digit / SHA-1 unless configured otherwise.

Related Tools

Frequently Asked Questions

Is my secret key sent to your servers?

No. TOTP codes are generated entirely in your browser using the Web Crypto API. Your secret never leaves your device.

Why does my code not match my authenticator app?

TOTP codes are time-based. Make sure your device clock is accurate (within a few seconds of UTC). Also verify that the period (30s vs 60s) and digit count (6 vs 8) match the settings used when the secret was registered.

Can I use this to set up 2FA on a real account?

This tool is intended for testing and debugging 2FA integrations, not for managing live account credentials. For production use, store your secrets in a dedicated authenticator app or password manager.