TOTP / 2FA Authenticator

Generate time-based 2FA codes from a secret — seeds never leave your device.

Free online TOTP / 2FA code generator. Paste a secret or otpauth link for live codes, like Google Authenticator — in your browser, seeds stay private.

About TOTP / 2FA Authenticator

TOTP / 2FA Authenticator is a free, browser-based tool that turns a Base32 secret — or a full otpauth:// key URI — into a live, auto-refreshing time-based 2FA code, the same kind Google Authenticator or Authy generate. It computes codes locally using the otpauth library, supports SHA1/SHA256/SHA512, 6 or 8 digits, and 30s or 60s periods, and shows the current code, the next code, and a countdown ring. Use it to recover access when you can't reach your phone app, to test a TOTP setup, or to grab a one-off code. Everything runs in your browser — your secret is never uploaded, nothing is stored on a server, and there's no signup.

How to use TOTP / 2FA Authenticator

  1. Paste the Base32 secret a site showed when enabling 2FA (spaces are ignored), or paste a full otpauth:// key URI, into the secret field.
  2. If you pasted a raw secret, set Digits (6 or 8), Period (30s or 60s), and Algorithm (SHA1, SHA256, or SHA512) to match what the site expects — defaults are 6 / 30s / SHA1.
  3. Note that if you pasted a full otpauth:// URI, those manual controls are ignored and the URI's own digits, period, and algorithm take over.
  4. Read the large current code, which refreshes automatically; the countdown ring shows seconds remaining and turns red in the final 5 seconds.
  5. Click 'Copy code' to copy the current code, and use the 'Next code' preview if the current one is about to expire.

Frequently asked questions

Is my 2FA secret uploaded to a server?
No. Your secret never leaves your device — codes are computed entirely in your browser with the otpauth library, and nothing is uploaded or stored on a server.
Is it free and do I need an account?
Yes, it's completely free with no signup, account, or watermark.
What input formats does it accept?
Either a Base32 secret (the alphanumeric string a site shows when you enable 2FA — spaces, dashes, and lowercase are tolerated) or a complete otpauth://totp/... key URI, which also carries the issuer, account label, and settings.
Why are the Digits, Period, and Algorithm controls greyed out?
When you paste a full otpauth:// URI, the tool uses the digits, period, and algorithm embedded in that URI, so the manual controls are ignored and dimmed. Paste just the raw secret if you want to set those yourself.
What algorithms, digit lengths, and periods are supported?
SHA1, SHA256, and SHA512 algorithms; 6 or 8 digit codes; and 30-second or 60-second refresh periods, covering the common TOTP configurations used by most sites.
Is this a safe replacement for my phone authenticator?
It accurately generates valid codes, but it does not store your secrets between sessions, so it's best for recovery, testing, or one-off codes. Avoid pasting a production seed on a shared or public computer.

People also search for

TOTP / 2FA Authenticator is also known as totp 2fa online, totp 2fa generator, totp 2fa code, how to get totp, totp authenticator online, generate 2fa code from secret, what is totp.