TOTP Generator

Free online TOTP generator. Generate 2FA two-factor authentication codes from any base32 secret key. Works with Google Authenticator, Microsoft Authenticator, Authy, and any TOTP-compatible app. Pure client-side, no data leaves your browser.

Paste the secret key from your 2FA setup (usually provided as a QR code or text string)
Security Notice: All processing happens in your browser. Keys are stored in localStorage only. Never share your secret keys with anyone.

Quick Examples

About TOTP Generator

TOTP (Time-based One-Time Password) is an algorithm that generates a temporary passcode based on the current time and a shared secret key. It is the standard behind most 2FA (Two-Factor Authentication) apps like Google Authenticator, Microsoft Authenticator, and Authy. This tool implements RFC 6238 entirely in your browser.

Features

Frequently Asked Questions

What is TOTP?

TOTP (Time-based One-Time Password) is an algorithm defined in RFC 6238. It generates a temporary 6- or 8-digit code based on the current time and a shared secret key. The code changes every 30 seconds (or custom interval), making it ideal for two-factor authentication.

Is it safe to enter my secret key here?

Yes. All processing happens entirely in your browser using JavaScript. No data is sent to any server. The secret key is stored only in your browser's localStorage if you choose to save it. For maximum security, you can use the tool without saving keys and clear your browser data when done.

Will this work with Google Authenticator?

Yes. This tool uses the same standard algorithm (RFC 6238) as Google Authenticator, Microsoft Authenticator, Authy, and other popular 2FA apps. If you enter the same secret key and use the same settings (6 digits, SHA-1, 30-second period), the generated code will match.

What is a base32 secret key?

A base32 secret key is a string of characters (A-Z, 2-7) that is encoded in base32 format. When you set up 2FA on a website, they usually provide this key as a text string or embedded in a QR code. The key is shared between the server and your authenticator app.