๐ TOTP/HOTP Generator
Enter a secret key
Enter a Base32 secret key to generate an RFC 6238-compliant time-based one-time password (TOTP), the same kind used by authenticator apps (Google Authenticator, etc.). Customize the digit count, refresh interval, and hash algorithm. All computation happens in your browser via the Web Crypto API โ your secret is never sent anywhere.
How to use
- Enter a Base32-format secret key (the string shown when setting up an authenticator app).
- Adjust the digit count (6 or 8), refresh interval (seconds), and hash algorithm as needed.
- The current one-time password is shown and refreshes automatically at the configured interval.
FAQ
Is this calculation correct?
It has been verified against the official RFC 6238 test vector (secret "12345678901234567890", Unix time 59 seconds, producing the 8-digit code "94287082").
Is my secret key safe?
All computation happens entirely in your browser via the Web Crypto API and is never sent to a server. That said, be mindful of shared devices or onlookers when entering a real authentication secret.
Why does this use Base32?
Because the secret shown during authenticator app setup (via QR code or manual entry key) is typically encoded in Base32 format.