2FA Code Generator
Generate TOTP codes for testing two-factor authentication.
How TOTP Works
TOTP (Time-based One-Time Password) is defined in RFC 6238. It combines a shared secret key with the current time to generate a 6-digit code that changes every 30 seconds.
The algorithm: take the current Unix timestamp, divide by 30 (the time step), compute an HMAC-SHA1 with the secret key, and extract 6 digits from the result. Both the server and your authenticator app perform the same calculation independently.
This tool is for testing and development. For production 2FA, use a dedicated authenticator app like Google Authenticator, Authy, or 1Password — they store your secrets securely on your device.
Protect your 2FA: check your password strength and test for DNS leaks to ensure your accounts stay secure.
Hardware security keys
Amazon search links for privacy hardware categories. These are not product reviews and do not rank or rate specific items.
As an Amazon Associate I earn from qualifying purchases.
FAQ
What is TOTP?
TOTP (Time-based One-Time Password) is the standard behind most authenticator apps like Google Authenticator, Authy, and 1Password. It generates a 6-digit code that changes every 30 seconds based on a shared secret key.
Is this safe to use?
This tool generates codes entirely in your browser. No secret keys are sent to any server. Use it for testing and development — for real 2FA, use a dedicated authenticator app.