TOTP (Time-based One-Time Password) generates temporary codes for 2FA authentication.

Is my secret key safe?

Yes, everything runs locally in your browser — nothing is sent to any server.

Is it compatible with Google Authenticator?

Yes, it uses the same RFC 6238 standard.

Generate Time-based One-Time Passwords (TOTP) for two-factor authentication.

Secret Key (Base32)

Enter the base32 secret from your app's 2FA setup.

Privacy Notice

Your secret key never leaves your browser. All TOTP calculations are done locally using the Web Crypto API.

Paste your TOTP secret key (base32 encoded).

Your 6-digit TOTP code appears and updates every 30 seconds.

Enter the code in your app or service for 2FA verification.

Generate strong, random, and secure passwords instantly. Customize length and character types.

Check how strong your password is.

Encrypt and decrypt text using AES encryption.