TOTP One-Time Password
Parse otpauth URI locally in the browser, generate a Base32 secret, and calculate RFC 6238 one-time passwords.
How to use the TOTP one-time password
TOTP secret is processed only in the current browser’s memory; it is not uploaded, saved, or written to logs. The built-in example uses a public RFC 6238 test value.
Enter configuration
Paste the otpauth URI or enter the Base32 secret, algorithm, number of digits, and period.
Generate token
The tool calculates the current code using RFC 6238, and can check adjacent codes within the allowed time window.
Copy and clear
Verify the account before copying the result; clear the secret before leaving the page to avoid exposing it on shared devices.
Limitations and Notes
- The tool cannot recover a lost secret and cannot replace the identity provider’s account recovery process.
- When the device clock offset, server period, and algorithm configuration do not match, the code may fail verification.
- Operations on production accounts remain subject to the service provider’s security policies and independent verification.
FAQ
Will the secret be uploaded?
No. The calculation is performed on this page; the secret is not uploaded or written to browser storage. The built-in example secret is a public RFC 6238 test value.
Why are the passcode and the mobile app different?
Please check the device time, algorithm, number of digits, period, and secret encoding; any differing parameter will produce a different result.
Can it replace an authenticator app?
It is suitable for local troubleshooting and temporary verification; do not paste long-term account secrets into uncontrolled devices or pages.