TOTP Code Generator — TOTP — Time-based One-Time Password, defined in RFC 6238 — is the algorithm behind the 6-digit codes in Google Authenticator, Authy, 1Password, and every other 2FA app. The codes rotate every 30 seconds (typically) and are derived from a shared Base32 secret plus the current time.
Codes are generated locally in your browser using the Web Crypto API. Your secret is never sent to a server.
Was TOTP Code Generator useful?
Apa itu TOTP Code Generator?
TOTP — Time-based One-Time Password, defined in RFC 6238 — is the algorithm behind the 6-digit codes in Google Authenticator, Authy, 1Password, and every other 2FA app. The codes rotate every 30 seconds (typically) and are derived from a shared Base32 secret plus the current time.
This tool generates those codes locally using the Web Crypto API. Paste any Base32 secret (or an otpauth:// URI from a QR code) and watch the code refresh in real time. Nothing leaves your browser.
Cara menggunakannya
-
Paste your secret
A Base32 string (A–Z, 2–7) or a full otpauth:// URI.
-
Read the code
The 6-digit code refreshes automatically. Copy it before the timer hits zero.
-
Use it within the window
Codes are valid for the period (default 30s). After that, a new one is generated.
Contoh
Google Authenticator setup
After scanning a QR code, the service shows a 6-digit code that rotates every 30 seconds.
JBSWY3DPEHPK3PXP
Hasil: A 6-digit code, e.g. 492 039, with a 30-second countdown.
From an otpauth:// URI
Most QR codes encode a URI that includes the secret and parameters.
otpauth://totp/GitHub:user?secret=JBSWY3DPEHPK3PXP&issuer=GitHub
Hasil: Same code as above — the URI is parsed and the secret extracted.
Pertanyaan yang sering diajukan
Panduan terkait
How to Encrypt a Message with a Password (in Your Browser)
A practical guide to password-based encryption: how AES-GCM with PBKDF2 actually works, why the wire format matters for future compatibility, the common foot-guns (weak passwords, no integrity check, ECB mode), and how to encrypt a message in your browser without trusting a remote service with the plaintext.
The Myth of the Secure Password in 2026 (and What Actually Matters)
A "secure" password is no longer the bottleneck. The bottleneck is everything around the password. Here is what the threat model actually looks like in 2026, why a 16-character random password is not enough on its own, and the four things that actually keep you safe.
The 6 Password Mistakes That Cost You in 2026 (and How to Avoid Them)
The six password mistakes almost everyone makes in 2026: weak passwords, password reuse, no 2FA, storing in browsers, sharing via text, and ignoring breach notifications. What actually goes wrong, the realistic cost of each, and the five-minute fix for each one.
Peralatan terkait
Generator Kata Sandi
Hasilkan kata sandi acak yang kuat di browser Anda. Pilih panjang, jenis karakter, dan jumlah. Tidak ada yang diunggah.
Hash Generator
Generate MD5, SHA-1, SHA-256, and SHA-512 hashes of any text instantly.
Dekoder JWT
Dekode JSON Web Tokens untuk melihat header, payload, dan tanda tangan. Gratis, di browser Anda, tanpa unggahan.
Last reviewed: 2026-09-25