TOTP / 2FA Generator
Generate time-based one-time passwords (TOTP) from a secret key — compatible with Google Authenticator
TOTP Generator
RFC 6238 — Time-based One-Time Passwords via WebCrypto
Valid for 30 more seconds
Technical Details
Algorithm
HMAC-SHA1
Period
30 seconds
Digits
6
Time Slot (T)
59295868
Security Notice
Scan the secret with Google Authenticator or Authy to verify codes match. Never share your secret key — it grants full access to generate valid codes.
TOTP / 2FA Code Generator
Generate time-based one-time passwords (TOTP) from a secret key — compatible with Google Authenticator, Authy, and any RFC 6238 authenticator app. Runs 100% in your browser.
FAQ
What is TOTP?
TOTP (Time-based One-Time Password) is a 6-digit code that changes every 30 seconds. It's the second factor in 2FA — even if someone has your password, they can't log in without the current TOTP code.
How does TOTP work?
TOTP = HMAC-SHA1(secret_key, floor(current_unix_time / 30)), then take the last 6 digits. The server and your authenticator app derive the same code independently — no network call needed.
Is this tool safe to use?
This tool is for testing and development. Never enter your real 2FA secrets into any online tool. Use your authenticator app for production accounts.
Continue Exploring
Other Security Tools you might like...
Password Strength Checker
Check password strength and get suggestions to improve security
QR Code Generator
Generate QR codes for URLs, text, email, and more
QR Code Reader
Read and decode QR codes from uploaded images
Barcode Generator
Generate barcodes in CODE128, EAN-13, and other formats
SSH Key Generator
Generate Ed25519 or ECDSA SSH key pairs using the Web Crypto API — runs 100% in your browser
RSA Key Generator
Generate 2048-bit or 4096-bit RSA key pairs in PEM format using the Web Crypto API — runs 100% in your browser
Hash Compare
Compare two hash values to verify file integrity or passwords
File Hash Checker
Drag and drop any file to instantly compute its MD5, SHA-1, SHA-256 and SHA-512 checksums — verify integrity against a known hash