2FA Code Generator
Generate 2FA (TOTP) verification codes from your secret key, entirely in your browser. Your secret is never uploaded or stored.
Advanced
All TOTP codes flip on a shared clock (like Google Authenticator), so entering a new key does not restart the countdown.
Accounts for this tab (max 20)
Accounts are kept only until you close this tab. Secrets are marked [SENSITIVE] in CSV exports.
Developer check · RFC 6238 test vector
Runs the Appendix B SHA-1 vector at T=59 only when requested.
🔒 Secret stays in this tab only. Need backup codes? Use the password generator.
How to generate a 2FA code
Paste a Base32 secret or an otpauth TOTP URI. Codes are generated locally with the selected algorithm, digit count and period — the default remains SHA-1, 6 digits and 30 seconds.
FAQ
Is my 2FA secret safe?
Yes. The TOTP code is computed entirely in your browser using the Web Crypto API. Your secret is never sent to a server.
What is a TOTP secret?
It is the Base32 key a service shows you when setting up two-factor authentication (often behind the QR code, e.g. JBSWY3DPEHPK3PXP).
Why does the code change every 30 seconds?
TOTP codes are time-based and rotate every 30 seconds by default. Some services use a 15- or 60-second period instead.
Should I share my 2FA code?
Never share a live code with anyone — treat it like a password. This tool has no Share button on purpose.
Last updated: