# TOTP Generator

Canonical: https://dev.eneawork.it/totp
Language: en
Updated: 2026-11-02
Author: Enea Zani (https://eneawork.it)

Generate time-based one-time passwords from a Base32 secret.

## What it does

TOTP is the six-digit code behind most authenticator apps. It derives a code from a shared Base32 secret and the current 30-second time step. This generator implements RFC 6238 in your browser; the secret never leaves the tab.

## How to use

1. Paste the Base32 secret from your authenticator setup.
2. Choose digits, period and hash algorithm if they differ from the defaults.
3. Copy the current code before the timer runs out.

## FAQ

### Does it work with Google Authenticator and Authy?

Yes, with the default 6 digits, 30-second period and SHA-1.

### Why does the code change every 30 seconds?

TOTP derives the code from a time counter. The server accepts the current step and usually one adjacent step for clock drift.

### Is my secret safe here?

It is processed locally and never uploaded. Still avoid real production secrets on a shared or recorded screen.

## Related tools

- [HMAC Generator](https://dev.eneawork.it/hmac)
- [Base32 Encoder](https://dev.eneawork.it/base32)
- [JWT Decoder](https://dev.eneawork.it/jwt)

## Machine-readable

- Tool catalogue: https://dev.eneawork.it/tools.json
- Full AI context: https://dev.eneawork.it/llms-full.txt
- Privacy: https://dev.eneawork.it/privacy
- This page in HTML: https://dev.eneawork.it/totp
- Italian version: https://dev.eneawork.it/it/totp