格 千格 KiloCell
Copyed authentication code!

TOTP Generator

Generates a 2FA authentication code in real time. Supports all ID keys that follow the RFC 6238 standard.

Keys usually consist of 16-32 bits of letters and numbers.

------
30

Click on a number to quickly copy

What's a TOTP? How does it protect your account?

TOTP (Time-based One-Time Password), a one-time, time-based password, is currently the most widely used Double-factor authentication (2FA) One of the criteria. It is defined by RFC 6238 and is often used by Google Autocentor, Microsoft Autostat and Autoy etc.

TOTP Work

The core of TOTP is Shared Keys and Current Time.

  • Key exchange: When you open 2FA the server will generate a Base32 code key. You can deposit this key in the authentication device by scanning 2D or manually entering it.
  • Synced calculation: Your authentication and server will run the HMAC algorithm using the same key and current time-steps (usually 30 seconds).
  • Authentication: Because time is synchronized, the sixs are calculated at both ends. The figures will also be consistent. Even if the hackers steal your static password, you cannot log in your account because of the lack of this dynamic authentication code.

Solve the common 2FA authentication failure

If you find the resulting authentication code always sending a bug, it is usually caused by:

  • Time does not sync: This is the most common reason. TOTP relies heavily on system time. If your phone or server is more than 30 The code will expire in seconds. Make sure you set the " AutoSett the time " on.
  • Key format error: Ensures that the input of the Secret Key does not contain spaces or illegal characters. Base32 character set contains only A-Z and 2-7.
  • Step disproportionate: Although 30 seconds is a standard step, some old systems or specific hardware may be used for 60 seconds.

Why use the online TOTP generator?

Although we suggest managing the authentication code on the phone app, online tools are useful in the following scenes:

  • Developer test: When integrating 2FA functions, developers can quickly verify the validity of algorithms using online tools.
  • Emergency backup: If your phone is lost and you have a key backup, you can log in with this tool.
  • Multi-end sync: On trusted private equipment, the authentication code is quickly checked without the need to remove the cell phone.

Privacy statements: Our Totp. The generator is fully running locally in the browser. Your key will not be sent to the server, nor will it be stored anywhere. Close the page and all sensitive information will disappear immediately.