TOTP Code Generator
Paste a Base32 secret key — the same kind shown when an app sets up two-factor authentication — and get the current 6-digit code, refreshing automatically every 30 seconds.
How to use
When you enable 2FA on an account, the setup screen usually offers a QR code and, underneath it, a plain text "secret key" as a fallback for when you can't scan a code. Paste that secret here to generate the same codes your authenticator app would show — useful when testing your own 2FA setup or recovering access without the app.
This implements the open TOTP standard (RFC 6238) exactly as Google Authenticator, Microsoft Authenticator, Authy and 1Password all do: HMAC-SHA1 over a 30-second time counter, truncated to 6 digits. Any tool implementing the same standard will show the same code at the same moment.
FAQ
Is it safe to paste my 2FA secret into a website?
This one, yes — the code runs entirely in your browser; the secret is never transmitted anywhere, and you can verify this by checking your browser's network tab or disconnecting from the internet after the page loads. As a general habit, only paste 2FA secrets into tools you've verified work this way.
Why does my code not match what my phone shows?
Most likely your device's clock has drifted — TOTP codes depend on both sides having the same time, and even a difference of a minute or two produces a completely different code. Less commonly, the secret was copied with a typo or extra whitespace.
What's the difference between TOTP and HOTP?
TOTP (Time-based One-Time Password) derives the code from the current time, refreshing every 30 seconds regardless of use. HOTP (HMAC-based One-Time Password) derives it from a counter that increments each time a code is requested — TOTP is what almost every modern authenticator app uses today.
Can I use this instead of an authenticator app?
For occasional testing or account recovery, yes. For daily use, a dedicated authenticator app or password manager is safer — it stores the secret encrypted on your device rather than requiring you to paste it into a browser each time.