TOTP generator
Paste a Base32 secret (like from Google Authenticator setup) and get the current 6- or 8-digit code with a live countdown. HMAC runs locally via Web Crypto — the browser API that also providessecure random UUIDs.
Your secret never goes in the URL, localStorage, or any server. It stays in page memory until you leave. Only paste secrets on machines you trust — this page is educational, not an official authenticator app.
~~~
Current code
~~~
otpauth URI
QR for import
~~~
About this tool
TOTP (RFC 6238) hashes a time counter with your secret using HMAC. Authenticator apps and this page use the same math — only the secret and clock need to match.
The QR encodes a standard otpauth://totp/… URI so phones can import the secret. We never persist that secret outside this tab's memory.
~~~