TOTP Code Generator
Show current two-factor (2FA) codes from a secret or otpauth link, locally
- Files never leave your device
- Runs in your browser
- Free, no sign-up, no watermark
Only paste a real 2FA secret on a computer you trust. Anyone who has it can generate your codes. It stays in this tab: nothing is stored or sent, and it is gone when you close the page.
Read a QR code image
Paste a secret to see your codes.
How to use TOTP Code Generator
Generate current two-factor codes from a TOTP or HOTP secret, an otpauth:// link or a screenshot of the setup QR code. The secret stays in this browser tab: nothing is stored or sent, and it is gone when you close the page.
- 1
Paste the Base32 secret or otpauth:// link into the field, or drop a screenshot of the QR code onto Read a QR code image.
- 2
Check the Settings (Type, Algorithm, Digits, Period); values from an otpauth:// link are filled in automatically.
- 3
Click Copy code before the countdown ring runs out; the Next code is shown underneath.
- 4
For HOTP, step the Counter with the + and − buttons.
- 5
To test your own 2FA setup, click Generate a test secret and turn on Show QR code to scan it with an authenticator app.
Frequently asked questions
Is it safe to paste my real 2FA secret here?
The secret never leaves this tab: it is not stored or sent, and closing the page removes it. Still, anyone who sees it can generate your codes, so only do this on a computer you trust.
Why don't the codes match my authenticator app?
TOTP codes depend on your device clock, so a clock that is off by more than a few seconds gives different codes. Also check the Algorithm, Digits and Period; most services use SHA1, 6 digits and 30 seconds.
Can I import a Google Authenticator export QR code?
No. Those otpauth-migration:// codes bundle several accounts in one. Export the accounts one at a time and scan each QR code instead.
What secret format does it accept?
Base32 (letters A–Z and digits 2–7), with or without spaces, dashes or = padding, and otpauth://totp/ or otpauth://hotp/ links including issuer, algorithm, digits and period.
Does it remember my secrets?
No. Nothing is saved, so you need to paste the secret again next time. It is a tool for checking and testing, not a replacement for an authenticator app or your backup codes.