Generate Time-based One-Time Passwords (RFC 6238) from a Base32 secret key; shows current, previous, and next codes with a QR code and countdown timer; supports SHA-1, SHA-256, SHA-512 algorithms.
secret query parameterEnter a Base32 secret key to generate codes
TOTP (Time-based One-Time Password) is an algorithm standardised in RFC 6238. It generates a short-lived code by computing HMAC of the current time window using a shared secret.
Generate Time-based One-Time Passwords (RFC 6238) from a Base32 secret key; shows current, previous, and next codes with a QR code and countdown timer; supports SHA-1, SHA-256, SHA-512 algorithms.
Enter the Base32 secret in the Generate Code tab to see the current, previous and next codes with a countdown. SHA-1, SHA-256 and SHA-512 are supported.
The Secret Generator tab creates a Base32 secret, and the tool shows a QR code you can scan in an authenticator app.
Yes, the HOTP tab generates counter-based one-time passwords (RFC 4226).
It is best for testing and development. Entering real account secrets into any web page carries risk.
No. This tool runs entirely in your browser — your input is processed locally on your device and is never uploaded or stored on a server.