What format is the secret?

TOTP secrets use Base32 encoding — uppercase letters A-Z and digits 2-7. Most 2FA setup QR codes contain a 'secret' parameter in Base32 format.

All Tools›Encoding & Security›

TOTP / 2FA Generator

Free · No Server

Generate TOTP one-time codes (Google Authenticator style) using Web Crypto — no server.

All TOTP generation uses Web Crypto API — your secret never leaves your browser.

Base32 Secret Key

Enter the Base32 secret from your authenticator app QR code, or generate a new one.

What is Totp Generator?

The TOTP Generator produces time-based one-time passwords (RFC 6238) using HMAC-SHA1 via the Web Crypto API — exactly how Google Authenticator and similar apps work. Enter a Base32 secret, and the tool displays the current 6-digit code with a 30-second countdown. Auto-refreshes when each window expires.

How to Use

1
Enter a Base32 secret
Paste your TOTP secret (Base32 encoded), or click Generate to create a random one.
2
View the code
The current 6-digit TOTP code is displayed with a countdown progress bar showing the remaining seconds.
3
Watch it refresh
The code automatically regenerates when the 30-second window expires.

Common Use Cases

Testing 2FA implementation in web applications
Learning how TOTP/HMAC works
Verifying a TOTP secret before adding to authenticator app

Key Features

RFC 6238 compliant TOTP
Web Crypto API HMAC-SHA1
30s countdown progress bar
Previous code shown
Random secret generator

🔒

100% Private — No Server Required

All processing happens directly in your browser. No data is uploaded, stored, or transmitted to any server.

Frequently Asked Questions

Related Free Tools

JWT Builder JWT Decoder SHA Hash Tool Password Generator UUID Generator

Explore more Encoding & Security tools →

Last reviewed on June 5, 2026 by the AiTechWorlds Tools Team. All processing runs locally in your browser.

Learn more on this topic

Notes2FA & MFA: Implementation Guide QuizCybersecurity Fundamentals

AiTechWorlds