Security

Processed locally

TOTP Code Generator

Generate time-based one-time passwords from a Base32 secret locally.

Tool options · presets, sharing & more

Presets & sharing: options only, never files, text or passwords. Undo/redo: editable form values, not file selection or generated results.

How to Use TOTP Code Generator

1

Enter the token or Base32 secret, or choose the asset for an integrity hash.

2

Select the supported algorithm and required parameters.

3

Run the operation and inspect the signature, expiry, or hash result.

4

Use the result only within the tool's stated validation limits.

What This Tool Does

Generate time-based one-time passwords from a Base32 secret locally. Uses HMAC with SHA-1, SHA-256, or SHA-512, six or eight digits, and a 30- or 60-second period. Generate again after the displayed expiry.

Common Use Cases

Checking development assets and authentication test data locally.
Inspecting the result without storing secrets in browser storage.
Privacy & Processing

This tool processes files and input in this browser tab. Its processing code does not upload them to a server. Loading this page and fetching uncached app files uses an internet connection. Optional usage analytics requires your consent and excludes input, filenames, passwords and generated content. Form undo history and result transfers stay in session memory. Explicitly saved presets contain approved settings only.

Offline use is not verified for this tool. Keep an internet connection available to load its page, code and any additional dependencies.

Frequently Asked Questions

What should I check before using the result?

Uses HMAC with SHA-1, SHA-256, or SHA-512, six or eight digits, and a 30- or 60-second period. Generate again after the displayed expiry.

Are my files or inputs uploaded?

No. This tool processes selected files and entered data locally in your browser. Only the page and its supporting code are downloaded.

Does this tool work offline?

Offline use is not verified for this tool. Keep an internet connection available to load its page, code and any additional dependencies.