What this tool does
TOTP is the six-digit code behind most authenticator apps. It derives a code from a shared Base32 secret and the current 30-second time step. This generator implements RFC 6238 in your browser; the secret never leaves the tab.
How to use it
- Paste the Base32 secret from your authenticator setup.
- Choose digits, period and hash algorithm if they differ from the defaults.
- Copy the current code before the timer runs out.
Questions
Does it work with Google Authenticator and Authy?
Yes, with the default 6 digits, 30-second period and SHA-1.
Why does the code change every 30 seconds?
TOTP derives the code from a time counter. The server accepts the current step and usually one adjacent step for clock drift.
Is my secret safe here?
It is processed locally and never uploaded. Still avoid real production secrets on a shared or recorded screen.