🔑

TOTP Generator

Generate Time-Based One-Time Passwords (RFC 6238). Enter a Base32 secret to get your 6-digit code.

Secret Key (Base32)

Try a demo secret:

JBSWY3DPEHPK3PXP BASE32SECRET234567

Current TOTP Code

— — — — — —

Security Notice: This tool is for testing and educational purposes only. Never enter a real 2FA secret from a live account into a web tool. Your secret key is processed entirely in your browser — nothing is sent to any server.

About TOTP Generator

Security-sensitive operations should never require uploading your data to a third-party server. TOTP Generator runs entirely in your browser, letting you generate time-based one-time passwords (rfc 6238). enter a base32 secret to get your 6-digit code with complete confidence that your information stays private. No server calls, no logging, no data retention.

How to Use

Enter your data Paste or type your sensitive data into the input field. Remember: nothing leaves your browser.

Configure options Select the algorithm, encoding format, key size, or other parameters as needed.

Process Click the action button to encrypt, hash, encode, or perform the security operation.

Copy the output Copy the result securely. For sensitive outputs, make sure to store them in a safe location.

🔒 Privacy note: All processing happens locally in your browser. Your data is never sent to any server.

Why Use TOTP Generator?

🔒

True Client-Side Security All cryptographic operations run in your browser using the Web Crypto API. Your sensitive data — passwords, keys, encrypted messages — never touches any server.

🛡️

Industry-Standard Algorithms TOTP Generator uses the same cryptographic algorithms trusted by banks, governments, and security professionals worldwide. No homebrew crypto.

👁️

Open & Transparent View the source code right in your browser (Ctrl+U). Verify exactly what the tool does with your data — no hidden behavior, no tracking.

⚡

No Registration Required Security tools should be accessible without creating accounts or sharing personal information. Use TOTP Generator immediately — no sign-up, no email, no strings attached.

Frequently Asked Questions

TOTP (Time-Based One-Time Password) is an algorithm (RFC 6238) that generates a 6-digit code that changes every 30 seconds. It uses HMAC-SHA1 with a shared secret key and the current timestamp. It's the basis for apps like Google Authenticator, Authy, and Microsoft Authenticator.

When setting up 2FA on a website, they typically show a QR code AND a text backup code. The text backup code is your Base32 secret key. It looks like: JBSWY3DPEHPK3PXP. This is what you enter here. Never share this key with anyone.

TOTP uses the current Unix timestamp divided by 30 as a counter. Both your authenticator app and the server perform the same HMAC-SHA1 calculation and should get the same 6-digit result. After 30 seconds the timestamp counter increments and a new code is generated.