Free Online TOTP Code Generator

1. Paste the Base32 secret into the input — spaces and case don't matter.
2. Read the current 6-digit code in the result panel.
3. Watch the countdown to see when the code will refresh (every 30 seconds).
4. Click Copy code to copy, then paste it into the site asking for the 2FA code.

TOTP (Time-Based One-Time Password, RFC 6238) is built on HOTP (RFC 4226). It takes the current Unix time, divides it into 30-second windows, computes HMAC-SHA1 of the window counter using your shared secret, then truncates the result to a 6-digit decimal code. Anyone with the same Base32 secret and a synced clock produces the same code, but without the secret the code is unpredictable.

When you scan a 2FA QR code into an authenticator app, you're storing the Base32 secret embedded in that QR. This tool lets you compute codes from that secret directly. Useful for backup access when you've lost your phone, for testing 2FA implementations during development, or for using a single hardware token's secret on multiple devices.

The Base32 secret never leaves your browser. That said, a dedicated authenticator app is a more private place to store long-lived secrets day-to-day; treat this page as a development and recovery tool. RFC 6238 Appendix B test vectors are referenced in the source.