Is my 2FA secret sent anywhere?

No. Codes are computed entirely in your browser with the Web Crypto API (HMAC-SHA1). Your secret never leaves your device.

Why doesn't my code match my authenticator app?

TOTP relies on accurate clock time. Make sure your device clock is correct, and that you pasted the full Base32 setup key (letters A–Z and digits 2–7) without typos.

🔑

TOTP / 2FA Code Generator

Generate time-based 2FA codes from a secret.

Loading tool…

How to use the TOTP / 2FA Code Generator

1Paste your Base32 2FA secret key into the input.
2Read the current 6-digit code shown below.
3Copy it before the 30-second countdown bar runs out.

About the TOTP / 2FA Code Generator

Free online TOTP / 2FA code generator. Paste a Base32 secret key to get live RFC 6238 time-based one-time passwords in your browser, with a 30-second countdown.

Part of our Security collection. Browse all tools.

Frequently asked questions

Is my 2FA secret sent anywhere?: No. Codes are computed entirely in your browser with the Web Crypto API (HMAC-SHA1). Your secret never leaves your device.
Why doesn't my code match my authenticator app?: TOTP relies on accurate clock time. Make sure your device clock is correct, and that you pasted the full Base32 setup key (letters A–Z and digits 2–7) without typos.

More Security

→

🔒

Text Encrypt / Decrypt

Encrypt and decrypt text with a password.

→

🛡️

Password Strength Checker

Check how strong your password is.