TOTP Generator
Generate 2FA codes offline from any TOTP secret — RFC 6238, 6 or 8 digits, live 30-second countdown. Your secret never leaves the browser.
Paste a secret above to see live codes.
Works fully offline: the code is computed with WebCrypto in your browser and the secret is never sent or stored.
This tool runs entirely in your browser. Your data never leaves your device — it is not uploaded to any server.
How to use
- 1Copy the base32 secret from the service's 2FA setup page (or paste its otpauth:// link).
- 2Match the settings the service shows: 6 or 8 digits, 30- or 60-second period, SHA-1 unless told otherwise.
- 3Type the current code into the service before the countdown ends — or copy it with one click.
- 4Keep the tab open for repeated logins; codes refresh automatically every period.
TOTP Generator
Authenticator codes don't need an app on your phone. Paste a base32 secret (or a whole otpauth:// setup link from your old authenticator) and this tool computes the same rotating 6- or 8-digit codes as any RFC 6238 authenticator, with a live countdown to the next code.
Everything is computed locally with WebCrypto's HMAC — no network calls at all. The secret stays in browser memory only, so a lost phone never means a lost second factor.
Frequently asked questions
Is an offline authenticator safer than SMS codes?
Yes, in two ways. TOTP codes are computed on your device and never travel over the phone network, so there is nothing for SIM-swap attackers to intercept. They also expire every 30 seconds and require possession of the secret itself, which never appears in any message.
Where is my secret stored?
Nowhere. It is held in a variable in this tab's memory and used by WebCrypto to sign time counters. Nothing is written to localStorage, cookies or any server — close the tab and it is gone.
Why doesn't my code match?
The most common causes: a wrong algorithm (most services use SHA-1), the wrong period, or a device clock drifting more than a few seconds. Check the three selectors against the service's setup page, and sync your system clock.
Related tools
Password Generator
Generate strong passwords and passphrases in your browser with live entropy estimates — crypto-grade randomness, nothing sent or stored.
All tools →
Password Strength Checker
See how strong a password really is: zxcvbn scoring, realistic crack-time estimates and concrete fixes — all computed locally, never uploaded.
All tools →
Hash Generator
Compute SHA-1, SHA-256, SHA-384, SHA-512 or MD5 hashes of text or files, right in your browser. Fast checksums for integrity checks — nothing uploaded.
All tools →
Embed this tool
Put this tool on your own site with one line — it runs entirely in the visitor's browser.
<iframe src="https://zoyku.com/en/tools/totp-generator?embed=1" width="100%" height="640" style="border:0;border-radius:16px" title="Zoyku — totp-generator" loading="lazy"></iframe>