TOTP Generator – 2FA Authenticator Codes

TOTP & 2FA Authenticator Code Generator

Turn a Base32 secret into live two-factor (2FA) authentication codes with this free TOTP generator — no app to install. It implements the standard TOTP algorithm (RFC 6238) entirely in your browser using Web Crypto, so your secret key is never uploaded, logged, or sent to any server. Watch the current code and a countdown ring update every second, copy it in one click, or build an otpauth:// link for your authenticator app.

Runs 100% in your browser and works offline — your secret is never uploaded or sent anywhere.

Base32 secret key *

Paste the Base32 secret from your 2FA setup. Spaces and letter case are ignored.

Code settings

Digits

Refresh

Algorithm

Authenticator app details (optional)

Issuer

Account

Enter a secret to see your code

Paste a Base32 secret, or generate a random one, to start producing time-based codes.

How to use

Paste your Base32 secret key, or click the shuffle button to generate a random one.
Choose the number of digits (6 or 8), the refresh period (30 or 60 seconds) and the hash algorithm if your service uses non-default values.
Read the current code and copy it before the countdown ring runs out.
Optionally add an issuer and account name to build an otpauth:// URI for an authenticator app.

Features

Standards-compliant TOTP (RFC 6238) with dynamic truncation
Supports 6 or 8 digits, 30 or 60 second periods, and SHA-1, SHA-256 or SHA-512
Live code with a one-second countdown ring and a next-code preview
Random Base32 secret generator using the browser CSPRNG
Builds an otpauth:// URI for Google Authenticator, Authy and similar apps
100% client-side — the secret never leaves your browser and works offline

Frequently asked questions

Is my secret key sent to your server?

No. The entire calculation — Base32 decoding, HMAC and truncation — runs locally in your browser with the Web Crypto API. Your secret is never uploaded, stored, or transmitted, and the tool keeps working with your network disconnected.

What is a TOTP secret and where do I get it?

When you enable two-factor authentication, a service shows you a Base32 secret (often behind a QR code as the "manual entry" or "setup key"). Paste that key here and this tool produces the same 6-digit codes an authenticator app would.

Which digits, period and algorithm should I choose?

Most services use 6 digits, a 30-second period and SHA-1, which are the defaults here. Only change them if your provider specifically documents 8 digits, a 60-second period, or SHA-256/SHA-512.

My code is rejected — what went wrong?

TOTP depends on your device clock. If your computer time is off by more than a few seconds the codes will not match, so enable automatic time syncing. Also double-check you copied the full secret and selected the same settings your service uses.

Can I use the generated secret to set up a new account?

Yes. Click shuffle to create a random Base32 secret, add an issuer and account name, and copy the otpauth:// URI into an authenticator app. Keep the secret private — anyone who has it can generate your codes.

TOTP & 2FA Authenticator Code Generator

otpauth:// URI

How to use

Features

Frequently asked questions

Related tools