Is it safe to paste my 2FA secret?

It is processed in your browser via Web Crypto API. Never sent to any server.

What if my codes are wrong?

Check your system clock. TOTP requires accurate time. More than 30 seconds offset produces invalid codes.

Can I use this instead of Google Authenticator?

Yes, but this tool does not store your secret. Use it as a backup, not a primary authenticator.

What if I lose my secret key?

Use account recovery (backup codes, SMS, or contact support) to set up 2FA again.

2FA Code Generator

Free online TOTP authenticator. Client-side 2FA code generator — paste your TOTP secret to get time-based one-time codes. No data leaves your browser.

Free online TOTP authenticator. Client-side 2FA code generator — paste your TOTP secret to get time-based one-time codes. No data leaves your browser. Paste your base32 TOTP secret key from your 2FA provider's QR code setup page. Click "Generate Code" to start the HMAC-SHA-1-based TOTP code generator. The current 6-digit code refreshes every 30 seconds with a countdown timer. Copy the code to use for login. Never share your secret key with anyone. Generates TOTP codes locally using the Web Crypto API (HMAC-SHA-1). Your secret key never leaves your browser. Compatible with Google Authenticator, Authy, 1Password, and any standard TOTP app.