TOTP Code Generator — TOTP — Time-based One-Time Password, defined in RFC 6238 — is the algorithm behind the 6-digit codes in Google Authenticator, Authy, 1Password, and every other 2FA app. The codes rotate every 30 seconds (typically) and are derived from a shared Base32 secret plus the current time.
Codes are generated locally in your browser using the Web Crypto API. Your secret is never sent to a server.
Was TOTP Code Generator useful?
Qu’est-ce que TOTP Code Generator ?
TOTP — Time-based One-Time Password, defined in RFC 6238 — is the algorithm behind the 6-digit codes in Google Authenticator, Authy, 1Password, and every other 2FA app. The codes rotate every 30 seconds (typically) and are derived from a shared Base32 secret plus the current time.
This tool generates those codes locally using the Web Crypto API. Paste any Base32 secret (or an otpauth:// URI from a QR code) and watch the code refresh in real time. Nothing leaves your browser.
Comment l’utiliser
-
Paste your secret
A Base32 string (A–Z, 2–7) or a full otpauth:// URI.
-
Read the code
The 6-digit code refreshes automatically. Copy it before the timer hits zero.
-
Use it within the window
Codes are valid for the period (default 30s). After that, a new one is generated.
Exemples
Google Authenticator setup
After scanning a QR code, the service shows a 6-digit code that rotates every 30 seconds.
JBSWY3DPEHPK3PXP
Résultat : A 6-digit code, e.g. 492 039, with a 30-second countdown.
From an otpauth:// URI
Most QR codes encode a URI that includes the secret and parameters.
otpauth://totp/GitHub:user?secret=JBSWY3DPEHPK3PXP&issuer=GitHub
Résultat : Same code as above — the URI is parsed and the secret extracted.
Questions fréquentes
Guides associés
How to Encrypt a Message with a Password (in Your Browser)
A practical guide to password-based encryption: how AES-GCM with PBKDF2 actually works, why the wire format matters for future compatibility, the common foot-guns (weak passwords, no integrity check, ECB mode), and how to encrypt a message in your browser without trusting a remote service with the plaintext.
The Myth of the Secure Password in 2026 (and What Actually Matters)
A "secure" password is no longer the bottleneck. The bottleneck is everything around the password. Here is what the threat model actually looks like in 2026, why a 16-character random password is not enough on its own, and the four things that actually keep you safe.
The 6 Password Mistakes That Cost You in 2026 (and How to Avoid Them)
The six password mistakes almost everyone makes in 2026: weak passwords, password reuse, no 2FA, storing in browsers, sharing via text, and ignoring breach notifications. What actually goes wrong, the realistic cost of each, and the five-minute fix for each one.
Outils associés
Générateur de Mots de Passe
Générez des mots de passe forts et aléatoires dans votre navigateur. Choisissez la longueur, les types de caractères et la quantité. Rien n'est téléversé.
Hash Generator
Generate MD5, SHA-1, SHA-256, and SHA-512 hashes of any text instantly.
Décodeur JWT
Décodez des JSON Web Tokens pour voir l'en-tête, la charge utile et la signature. Gratuit, dans votre navigateur, sans téléversement.
Last reviewed: 2026-09-25