TOTP Generator
Generate the rotating 2FA code for a secret key — the same time-based one-time password (TOTP) your authenticator app produces. Useful for testing 2FA setups or as a backup. Everything runs in your browser; your secret is never uploaded.
New to this? Read the TOTP guide →
Current code
Refreshes in 30s
Codes are generated locally with the Web Crypto API (RFC 6238). Your secret is never uploaded or stored. For everyday logins, a dedicated authenticator app is still recommended.
Frequently asked questions
What is a TOTP?
A TOTP (time-based one-time password) is the rotating 6-digit code used for two-factor authentication. It is computed from a shared secret and the current time (RFC 6238), so it changes every 30 seconds and matches what apps like Google Authenticator and Authy show.
Where do I find my secret key?
When you set up 2FA, the site shows a QR code and a “manual entry” or “setup key” — a string of Base32 letters and digits. Paste that here. You can also paste a full otpauth:// URI and the options fill in automatically.
Is it safe to paste my 2FA secret here?
The code is generated entirely in your browser and the secret is never uploaded or stored. Still, a TOTP secret is sensitive: only enter it on devices and sites you trust, and prefer a dedicated authenticator app for everyday use.