TOTP Code Generator
Test two-factor authentication while you build it, or see the codes for a secret during setup. Paste the secret or the otpauth:// link and the current code appears, refreshing as time passes.
How to generate TOTP codes
- 1Paste the Base32 secret or an otpauth:// link, or make a new secret.
- 2Check the digits, the period and the algorithm.
- 3Read the current code; it changes when the countdown ends.
The standard
Codes follow RFC 6238, the standard behind Google Authenticator, Authy and most other apps: by default six digits, a new code every 30 seconds, with HMAC-SHA1.
Debugging
If codes don't match, compare the time on both devices first. “Check a code at another time” shows the code for any Unix time, which helps when testing a server that allows codes from just before or after.
otpauth links
Links like otpauth://totp/Name?secret=…&digits=6 carry their own settings, which are used automatically.
Frequently asked questions
- Is the secret sent anywhere?
- No. Codes are computed in your browser with Web Crypto. Even so, keep the secrets of important accounts in your authenticator app, not on web pages.
- Can this replace my authenticator app?
- It's meant for testing and setup. For your own accounts, use an app on a device you control.