About
Generates 6-digit TOTP locally from a Base32 secret or otpauth URL, refreshing every 30 seconds. Secrets are not uploaded.
How to use
One Base32 secret per line, or uid|password|secret. otpauth:// URLs also work.
What this tool does
Generates 6-digit TOTP locally with a 30-second window for accounts that use 2FA.
Safety and privacy
The secret stays in browser memory and the input box. This is not a cloud authenticator and it will not back up secrets.
Limits
Assumes common 6-digit / 30-second TOTP. Sites with other digits or periods may not match.
FAQ
Is the secret uploaded?
No. Computation stays in the browser.
Why doesn't it match my phone authenticator?
Check clock sync, spaces in the secret, and whether you pasted otpauth instead of the raw secret.
What input is supported?
A Base32 secret, an otpauth:// URL, or uid|password|secret (third field).
Can this replace an official authenticator long term?
It can help in a pinch, but production accounts should use an authenticator or hardware key you control.
Related tools
- Security and generator tools
- Local Random Password Tool
Generate random passwords in the browser.
- Local Password Strength Estimate
Estimate password strength in the browser.
- Local SHA Digest
Compute SHA-1 / SHA-256 / SHA-512 in the browser.
- Local Random String Tool
Generate random strings for tokens and tests.