SEO & Web Utilities
OTP Code Generator
Live TOTP codes for testing 2FA, with a QR code for authenticator apps, SHA-1/256/512, and previous/next codes for clock drift.
Live TOTP codes for testing 2FA, with a QR code for authenticator apps, SHA-1/256/512, and previous/next codes for clock drift.
What you can do
- Live TOTP codes from any Base32 secret, with a countdown and the previous and next codes.
- A QR code and otpauth:// URI to add the secret to Google Authenticator, Authy or 1Password.
- SHA-1, SHA-256 or SHA-512, 6 or 8 digits, 30 or 60 second periods.
- Check a code against the current window and ±1 window for clock drift.
Part of IONIAN's SEO & Web Utilities tools — Inspect URLs, metadata, devices, auth headers, and other browser-facing web details.
Frequently asked questions
What is a TOTP code?
A time-based one-time password (RFC 6238): a 6- or 8-digit code computed from a shared secret and the current time, usually changing every 30 seconds. Authenticator apps and your server compute the same code independently, so nothing has to be sent between them.
Why does my 2FA code not match?
The usual causes are a clock that is off by more than about 30 seconds, a different algorithm, digit count or period than the server expects, or a secret copied with a typo. Most servers accept the previous and next window to allow for drift, which is why this tool shows them too.
Is it safe to paste a secret here?
The codes are computed in your browser and nothing is sent anywhere. Still, treat this as a testing tool: use it with test secrets for development, not with the secret of a real account you care about.
Free to use, no sign-up. Need a custom version or a full build? IONIAN Digital ships production software, websites, and MVPs — start a project.