Runs locally in your browser. Nothing you enter is uploaded to our servers.
Result will appear here
Tips for 2FA codes
Keep the shared secret offline or in an authenticator app.
Do not paste production TOTP secrets into untrusted tools.
Store backup/recovery codes somewhere safe when you enroll.
Time sync matters — wrong device time breaks codes.
Prefer app-based TOTP over SMS where available.
One-time codes from a secret you already have
Processing stays in your browser — your input is not uploaded to our servers.
TOTP is the six-digit code that changes every 30 seconds in authenticator apps. This page computes the current code from a base32 secret in the browser.
It is a helper when you are recovering an account or testing an integration — not a replacement for a dedicated authenticator that stores the secret safely.
Get a TOTP code
Paste the base32 secret
Use the secret shown when you set up 2FA, not a screenshot of an old code.
Read the current code
Codes expire quickly. If the clock on this device is wrong, the code will not match the server.
Clear the secret when done
Do not leave a live 2FA secret sitting in a browser tab.
TOTP generator FAQ
Is this the same as Google Authenticator?
Same algorithm (TOTP). The difference is storage: this page does not keep the secret after you leave.
Why is my code rejected?
Usually time drift, a truncated secret, or spaces in base32. Sync the device clock and paste the secret exactly.
Should I type real production secrets here?
Prefer an authenticator app. Use this for tests or recovery when you already have the secret in a safe place.