[{"data":1,"prerenderedAt":29},["ShallowReactive",2],{"content-totp-generator-en":3},{"about":4,"steps":8,"faq":13},[5,6,7],"With two-factor authentication (2FA) via an authenticator app, the service and the app share a secret. From it, both calculate the same six-digit code every 30 seconds: the time-based one-time password TOTP from RFC 6238. Google Authenticator, Microsoft Authenticator, Aegis, 1Password and Bitwarden all follow this standard.","This tool shows the current code for a Base32 secret or an otpauth:\u002F\u002F link, along with the previous and the next code and the time left. It also creates new 160-bit secrets with a QR code, so you can test the 2FA of your own application.","The codes are calculated with your browser’s Web Crypto API. The secret is not uploaded and not saved in the URL.",[9,10,11,12],"Paste the secret (e.g. JBSWY3DPEHPK3PXP) or the otpauth:\u002F\u002F link you got when setting up 2FA.","For a plain secret, adjust algorithm, digits and period if the service does not use the defaults SHA-1, 6 and 30 s.","Read or copy the current code. The bar shows how long it stays valid.","For a new 2FA setup, click “New secret”, enter issuer and account, and scan the QR code with your authenticator app.",[14,17,20,23,26],{"q":15,"a":16},"My code is rejected – why?","TOTP depends on the time. If your device’s clock is off by more than a few seconds, the codes do not match. Also check whether the service really uses SHA-1 with 6 digits and 30 seconds; an otpauth:\u002F\u002F link already contains these settings.",{"q":18,"a":19},"Can I use this tool instead of my authenticator app?","For tests and emergencies yes, permanently better not. An app stores the secrets protected on your device. This tool stores nothing, so you would have to enter the secret every time and keep it somewhere in plain text.",{"q":21,"a":22},"Where do I find an account’s secret?","When you set up 2FA, most services show a link like “enter code manually” below the QR code with the Base32 secret. If it is only in the QR code, read the otpauth:\u002F\u002F link with the [[qr-code-scanner]].",{"q":24,"a":25},"What is the difference between TOTP and HOTP?","HOTP (RFC 4226) increments a counter for every code, TOTP uses the current time divided by the period instead. This tool supports TOTP only, because nearly all services and apps use it.",{"q":27,"a":28},"Is it safe to enter my secret here?","The calculation runs entirely in your browser; nothing is sent or stored. Still, anyone who knows the secret can create your codes, so only enter it on devices you trust.",1792518998395]