How does TOTP work?
TOTP combines a shared secret with the current time interval and calculates a short code using HMAC.
Security
TOTP Generator
Generate RFC-compatible time-based one-time passwords from a shared secret directly in your browser.
Tool
TOTP Generator
Generate RFC-compatible time-based one-time passwords from a shared secret directly in your browser.
This tool runs in your browser. Your input is processed locally and is not uploaded.
About this Tool
Use this TOTP generator to test authenticator integrations and verify shared secrets. The current code is calculated locally from the entered secret and time settings.
Examples
- JBSWY3DPEHPK3PXP
- GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ
- MZXW6YTBOI======
Frequently Asked Questions
Why does the code change?
Each code is valid only for a fixed time interval, commonly 30 seconds.
Should I paste a real account secret here?
Avoid exposing production authentication secrets unnecessarily, even though processing is performed locally.
Related Tools
Password Hash Generator
Create salted password hashes using configurable password-hashing algorithms and parameters.
TOOLCSRF Token Generator
Create unpredictable random tokens for CSRF protection and application development.
TOOLRandom Token Generator
Create random tokens with configurable byte length and output encoding.
TOOLSecure Random String Generator
Create secure random strings from configurable alphabets without server processing.
TOOLOTP Generator
Create random one-time password codes with configurable length and character format.
TOOLSecret Key Generator
Create cryptographically secure secret key material with selectable bit length and encoding.
TOOL