What format is the secret?

TOTP secrets use Base32 encoding — uppercase letters A-Z and digits 2-7. Most 2FA setup QR codes contain a 'secret' parameter in Base32 format.

All Tools›Encoding & Security›

TOTP / 2FA Generator

Free · No Server

Generate TOTP one-time codes (Google Authenticator style) using Web Crypto — no server.

All TOTP generation uses Web Crypto API — your secret never leaves your browser.

Base32 Secret Key

Enter the Base32 secret from your authenticator app QR code, or generate a new one.

What is Totp Generator?

The TOTP Generator produces time-based one-time passwords (RFC 6238) using HMAC-SHA1 via the Web Crypto API — exactly how Google Authenticator and similar apps work. Enter a Base32 secret, and the tool displays the current 6-digit code with a 30-second countdown. Auto-refreshes when each window expires.

How to Use

1
Enter a Base32 secret
Paste your TOTP secret (Base32 encoded), or click Generate to create a random one.
2
View the code
The current 6-digit TOTP code is displayed with a countdown progress bar showing the remaining seconds.
3
Watch it refresh
The code automatically regenerates when the 30-second window expires.

Common Use Cases

Testing 2FA implementation in web applications
Learning how TOTP/HMAC works
Verifying a TOTP secret before adding to authenticator app

Key Features

RFC 6238 compliant TOTP
Web Crypto API HMAC-SHA1
30s countdown progress bar
Previous code shown
Random secret generator

🔒

100% Private — No Server Required

All processing happens directly in your browser. No data is uploaded, stored, or transmitted to any server.

Frequently Asked Questions

Related Free Tools

Base64 Encoder / Decoder JWT Decoder URL Encode / Decode HTML Entity Encoder UUID Generator Password Generator SHA Hash Tool JWT Builder

AiTechWorlds