TOTP Generator

Generate RFC 6238 time-based one-time passwords (TOTP), compatible with Google Authenticator, supporting SHA-1/256/512 algorithms and custom parameters.

Configuration

Base32-encoded shared secret (compatible with Google Authenticator)
Current Code
------
Refreshes in 0s

Usage

TOTP Principle

TOTP (Time-based One-Time Password) generates one-time passwords by combining a shared secret with the current timestamp via HMAC, then truncating to a fixed number of digits. Codes automatically refresh at regular intervals, commonly used for two-factor authentication (2FA).

Parameter Description

Secret: Base32-encoded shared secret used as the basis for code generation; Digits: Number of digits in the generated code (6 or 8), affects strength; Refresh Period: Time interval between code refreshes in seconds, default 30s; Algorithm: Hash algorithm used by HMAC, SHA-1 is the most compatible.

Steps

1. Enter the Base32-encoded shared secret (or click 'Generate Random Secret' to create one); 2. Select code length (6 or 8 digits); 3. Set the refresh period (default 30s); 4. View the current code and remaining time in real time; 5. Click 'Copy Code' to use for login verification.

Notes

For compatibility with standard TOTP clients, SHA-1 is recommended; the secret must be kept confidential and synchronized between parties; browser clock skew affects accuracy; this tool is a front-end simulation, generated codes are compatible with standard TOTP clients.