Generate live TOTP/2FA codes from a base32 secret. Scan QR with any authenticator.
TOTP (RFC 6238) uses HMAC-SHA1 with a 30-second time step. All computation runs locally — your secret is never sent anywhere.
Generate Time-based One-Time Passwords (TOTP/RFC 6238) from any base32 secret — the same algorithm used by Google Authenticator, Authy, and 1Password. Enter or generate a secret, set an account name and issuer, and get a live 6-digit code that refreshes every 30 seconds. Scan the QR code with any authenticator app. All computation runs locally in your browser.
This tool allows you to instantly generate and test Time-based One-Time Passwords (TOTP) directly in your browser using standard base32 secrets. Because all computation runs locally on your device, your authentication secrets remain private without requiring server transmission or external installations. It also provides a convenient QR code for easy scanning into any standard authenticator app.
Good to know: This tool is designed for testing and generation from raw secrets; users requiring managed, persistent cloud-synced credential storage for everyday personal accounts should use dedicated password managers instead.
Generate secure 6-digit 2FA codes and QR codes from any base32 secret locally in your browser.
Enter your base32 secret key
Paste your existing secret key into the input field or click generate to create a new one. This key is the foundation for your time-based one-time password.
Configure account and issuer details
Provide an account name and issuer, such as your email and the service name. These details help identify the entry when you scan it into an authenticator app.
View the live 2FA code
The tool automatically generates a 6-digit TOTP code that refreshes every 30 seconds. You can use this code immediately for two-factor authentication logins.
Scan the generated QR code
Use an app like Google Authenticator or Authy to scan the displayed QR code. This saves the secret and configuration to your mobile device for future use.
Estimated time: PT1M
Share this tool
Generate strong, customizable secure passwords instantly.
Generate HMAC-SHA256/512 signatures for API authentication and webhooks.
Generate QR codes from text or URLs and download as PNG.
Generate MD5, SHA-1, SHA-256, SHA-512 hashes from text.
Encode and decode text with ROT13, Caesar, Atbash, and Vigenère ciphers.
Check password strength: entropy, crack time, patterns, and breach check.
AES-256-GCM encrypt and decrypt text with a passphrase — runs in your browser.
Build and sign JWTs with HS256/384/512. Verify signatures. Runs in your browser.
Compute SHA-1/256/384/512 of any file and verify integrity — 100% browser-based.
Convert text or Markdown to a Word .docx file with live preview, RTL, and page-setup options.
Draw a Secret Santa with exclusions and share a private reveal link for each person.
Make custom bingo cards from your own words — play, print, or share a link.
Convert images to video with the Ken Burns zoom/pan effect. Add music and export as WebM.
Load and compare multiple URLs side by side in resizable iframes.
Rank anything with quick 1-v-1 matchups → a full ordered list you can share.
Convert Markdown to a fully customized, RTL-ready PDF.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.