TOTP Generator
Generate time-based one-time passcodes from a Base32 secret.
Secret
Base32-encoded shared secret
Current code
About the TOTP Generator
Generate live TOTP codes from a Base32-encoded secret using HMAC-SHA1 via the Web Crypto API, with a live countdown ring and a ready-to-scan otpauth:// URI for authenticator apps.
Examples
Generate a code
JBSWY3DPEHPK3PXPOutput
6-digit code, refreshes every 30sKeyboard shortcuts
- Copy the main outputCtrl / ⌘ + Shift + C
- Download the resultCtrl / ⌘ + S
- Share this toolCtrl / ⌘ + Shift + S
- Reset the inputsAlt + R
- Open the tool search paletteCtrl / ⌘ + K
Related tools
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
Password Policy Generator
Security
Generate password policy rules, regex and copy for NIST or PCI presets.
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Frequently asked questions
Read more
- How TOTP two-factor codes actually work (and why 30 seconds matters)
A six-digit code every half minute, no network required. Here is what HMAC-SHA1, a shared secret and the Unix timestamp are actually doing.
- Password entropy explained: why passphrases beat symbols, and what the crack-time number means
Length beats complexity, entropy is measurable, and pronounceable passwords have a place. A practical guide to generating passwords you can actually use.
Comments
No login needed. Comments appear after a quick review.
Loading comments…
Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser