2FA TOTP Generator

Generate private authenticator codes from Base32 secret keys

2FA Secret Key

Supports spaces and hyphens, which are cleaned automatically. Case does not matter.

Sample secret key (click to fill):
Calculation is completed locally in your browser. Your secret key is not uploaded.
Copy is supported by clicking the code, manually selecting the field, or using the Copy button.

Current Code

Current verification code (click the large code to copy)
Period
30s
Refresh
1s
Status
Ready

Mobile: long-press this field to select and copy, or tap the large code or Copy button.

Remaining --s

When to Use 2FA TOTP Generator

Account Recovery

Generate a code when you have the shared secret but cannot access your usual authenticator app.

Developer Testing

Test TOTP login flows and verify server-side two-factor authentication implementations.

Secret Validation

Confirm that a Base32 secret produces expected one-time passwords before deploying it.

Authenticator Backup

Use a browser-based fallback for temporary access when a mobile device is unavailable.

Security Training

Demonstrate how time-based one-time passwords rotate and expire in security workshops.

Local Tools

Generate codes without installing browser extensions or sending sensitive secrets to a server.

Frequently Asked Questions

What is a 2FA TOTP generator?

It creates time-based one-time passwords from a Base32 secret key. The generated code can be used as a second authentication factor on services that support standard TOTP.

How do I use this tool?

Paste or type your Base32 secret key, click Start Generating Codes, then use the current six-digit code before the countdown reaches zero.

Is the generator free?

Yes. It runs directly in your browser without registration, paid limits, or API keys.

Is my secret key private?

Yes. The code is calculated locally using browser cryptography. The secret key is not uploaded or shared with a remote service.

Why does the code change?

TOTP uses the current time and a fixed time period. This tool uses the common 30-second period, so a new code is generated every 30 seconds.

What are the limitations?

This page supports standard 6-digit SHA-1 TOTP with a 30-second interval and Base32 secret input. It does not store accounts or sync secrets across devices.

Recommended Tools

💬 User Comments

Share your thoughts and feedback about this tool

Please login to leave a comment

No comments yet. Be the first to share your thoughts!

×

Rate this tool

Select a rating