🔏 TOTP Code Generator
Generate 2FA TOTP codes from a secret key. Paste an otpauth URI or base32 secret and get the 6-digit code with a live countdown.
------ ------ ------ To add this account to a phone authenticator app, copy this URI into the QR Code Generator and scan the result.
About this tool
Time-based One-Time Passwords (TOTP) are the 6-digit codes that authenticator apps like Google Authenticator and Authy generate every 30 seconds. This tool computes them from a secret key, so you can test 2FA flows, access an account when your phone is unavailable, or inspect how the codes behave.
Paste a base32 secret (the string of uppercase letters and digits 2–7) or a full otpauth://totp/... provisioning URI. The tool detects the algorithm, digit count, and period from the URI automatically. Example: secret JBSWY3DPEHPK3PXP produces a different 6-digit code every 30 seconds, with a live countdown to the next one.
The previous and next codes are shown for verification, and the otpauth:// URI can be copied into the QR Code Generator to create a scannable code for a phone authenticator.
FAQ
Is it safe to paste my 2FA secret here? ›
The code runs entirely in your browser — no data leaves your device. That said, treat your secret like a password. Avoid pasting it on shared or untrusted computers, and clear it when done. For everyday logins, keep using a phone authenticator app or a password manager that stores TOTP.
Why does the code not match my authenticator app? ›
The most common cause is a clock mismatch: TOTP relies on the current Unix time, so a device clock that is off by more than a few seconds will produce different codes. Also check that the algorithm (SHA-1 by default), digits (6), and period (30s) match the original provisioning values.
What is a base32 secret? ›
Provisioning secrets are encoded in base32 (RFC 4648), an alphabet of A–Z and 2–7 that is case-insensitive and safe to print or type. The tool strips spaces, dashes, and lowercase automatically, so "jbsw y3dp ehpk 3pxp" is treated the same as "JBSWY3DPEHPK3PXP".
Does this support Steam Guard or 8-digit codes? ›
Yes. Set Digits to 8 for RFC 6238 8-digit tokens. Steam Guard uses a custom character set rather than decimal digits and is not supported by this tool — use the official Steam mobile authenticator for those.