TOTP Code Generator

Generate time-based one-time passwords (RFC 6238) from a Base32 secret with live countdown. Free online TOTP tool, browser-based.

Preparing private browser tool…

Your file will stay on this device.

Related tools

SERP Preview

Preview how your page appears in Google search results with character and pixel warnings. Free online SERP simulator, no signup.

XML Sitemap Generator

Create a valid XML sitemap from a list of URLs in seconds. Free online tool with lastmod, priority, and changefreq. No signup.

Color Picker

Pick colors and convert between HEX, RGB, HSL formats instantly. Copy color codes with one click. Free online tool.

File Hash

Generate MD5, SHA-1, SHA-256 checksums from files in your browser. Verify file integrity without uploading. Free and private.

Base64 Encoder

Encode and decode Base64 strings instantly. Supports text and file input. Free online tool, no upload, runs in your browser.

Text Case Converter

Convert text between UPPER, lower, Title, camelCase, snake_case, and more. Free online tool with one-click copy.

Frequently asked questions

What is TOTP?
Time-based One-Time Password (RFC 6238) generates short numeric codes from a shared secret and current time. Used by Google Authenticator and most 2FA apps.
Is my secret safe?
Yes. Base32 secret never leaves your browser. HMAC-SHA1 runs locally through WebCrypto. Still avoid pasting production secrets.
Why does code not match my app?
Check device clock is accurate, period is 30 seconds, digits is 6, and Base32 secret has no extra spaces.
Which settings can I change?
The period from 15 to 120 seconds and the code length from 4 to 10 digits. The defaults, 30 seconds and 6 digits with HMAC-SHA1, are what Google Authenticator and most services expect.
Why does my Base32 secret get rejected?
Only the letters A to Z and the digits 2 to 7 are valid Base32. Padding and spaces are stripped for you, but a 0, 1, or 8 copied from a printed code is not decodable.