The secret never leaves your browser — all crypto is done locally via the Web Crypto API. Still, treat your Base32 secrets like passwords.

Why does my code not match?

TOTP depends on accurate system time. Make sure your device clock is synchronised (NTP). A drift of more than 30 s will cause mismatches.

How are accounts stored?

Account names and secrets are stored in your browser's localStorage. Clear site data to remove them.

What is the 30-second window?

TOTP divides Unix time into 30-second steps. A new code is generated each step; the countdown shows how many seconds remain in the current step.

Security Free No signup

TOTP Code Generator (2FA)

Generate TOTP 2FA codes from a Base32 secret — no app needed.

Loading tool…

About this tool

TOTP Code Generator implements RFC 6238 Time-based One-Time Passwords entirely in the browser using the Web Crypto API. Enter the Base32 secret from any 2FA QR code, and the tool shows the current 6-digit code with a live countdown to the next 30-second window, plus the upcoming code so you're never caught off guard. Add multiple accounts — they're stored in localStorage so they persist between visits. An educational panel explains how TOTP works under the hood. This is a backup / recovery tool: always keep your primary 2FA method safe.

How to use

1 Enter a name for your account and paste the Base32 secret.
2 Click Add Account — the current 6-digit code appears immediately.
3 Watch the countdown ring; the next code is shown so you can switch seamlessly.
4 Add more accounts with the + button.
5 Click the trash icon to remove an account.

Frequently Asked Questions

Related tools

Hash Generator (SHA-256, SHA-512)

Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text or files — runs offline in your browser.

Password Generator

Create strong, random passwords with customizable length and character sets — runs offline.

Text Encryptor / Decryptor

Encrypt and decrypt text with a password using AES-GCM and WebCrypto — fully client-side.