TOTP Authenticator Code Generator
Your secret stays in your browser. Nothing is sent or stored.
Advanced options
What is TOTP Authenticator Code Generator
A TOTP generator turns a Base32 secret key into the rotating six-digit code that two-factor authentication asks for. This tool follows RFC 6238, the same standard as Google Authenticator and Authy, and computes each code with HMAC in your browser. The secret is never uploaded, so it works as a quick web-based authenticator or a backup when your phone is out of reach.
How to use
- Paste the Base32 secret shown when you set up two-factor authentication.
- Read the current six-digit code as it appears.
- Use the countdown bar to see how long the code stays valid.
- Open Advanced options to change the digits, period, or hash algorithm if a service requires it.
When to use it
Setting up 2FA and want to test the secret before trusting it, or locked out because your phone is dead? Paste the Base32 key here and read the same code your authenticator app would show. It follows RFC 6238, so a service that gives you a secret like JBSWY3DPEHPK3PXP produces a matching code here. Handy for developers testing a login flow or anyone needing a code in a pinch.
Frequently asked questions
Is my secret key sent to a server?
No. The code is computed in your browser with the Web Crypto API. Your secret is never uploaded, logged, or stored.
Which apps is this compatible with?
Any RFC 6238 TOTP setup, including Google Authenticator, Microsoft Authenticator, Authy, and 1Password. The defaults are 6 digits, a 30-second period, and SHA-1, which most services use.
Why is my code rejected by the service?
Check that the secret is correct, that your device clock is accurate, and that the digits, period, and algorithm match what the service expects. A clock off by more than a minute is the most common cause.
Related tools
AES Text Decryption
Decrypt AES-256 encrypted text with your password in your browser. Free, private, and fully offline. No data leaves your device.
AES Text Encryption
Encrypt text with a password using AES-256 in your browser. Free, private, and fully offline. Nothing is sent to a server.
Atbash Cipher Encoder and Decoder
Encode and decode the Atbash cipher online. Atbash mirrors the alphabet and is its own inverse, so one click scrambles and unscrambles. Free and private.