Generate time-based one-time passwords from a base32 secret.
Standard 30-second TOTP with 6 digits (HMAC-SHA1).
More free utilities you might find useful
Quick answers to common questions
Standard TOTP: HMAC-SHA1, 30-second period, 6 digits (RFC 6238).
Base32-encoded secret (as shown in authenticator app setup QR codes).
No. The secret stays in your browser and is never transmitted.
JBSWY3DPEHPK3PXP is a common test secret that produces rotating codes.
Your data is processed entirely in your browser. Nothing is sent to any server.