2FA code generator

Generate a verification code from your secret key. No account required.

Base32 key or an otpauth:// link.

Codes update automatically while this page is open.

Verification code

No code generated

Enter your secret key, then select Generate code.

Using the generator

Paste the setup key supplied by your account provider, select Generate code, then copy the current code into its verification field. This tool supports time-based one-time passwords (TOTP).

Guest codes are calculated in your browser. Your secret is sent to this site’s server only when you save a code or create a share link. Saved keys are encrypted on the server.

Frequently asked questions

How do I get a 2FA code?

Paste the setup secret from your account or an otpauth://totp/ link, then select Generate code. Copy the current code into the service you are signing in to. You do not need an account here to generate a code.

What is a TOTP code?

A time-based one-time password (TOTP) is a short code calculated from a secret key and the current time. Most services use six digits and refresh the code every 30 seconds. This tool also supports eight digits and other time periods from authenticator links.

Is my secret key saved?

Guest codes are generated in your browser. The key is not saved or sent to the server unless you choose Save or Share. Saved keys are encrypted on this site’s server. Keep a backup of your original recovery codes.

Do I need an email address?

No. To save authenticators on this site, create an account with a username and password. You can generate codes and open a shared link without creating an account.

How do share links work?

A share link lets someone view current codes without receiving the permanent secret key. Choose a lifetime of one hour, one day, or seven days. Signed-in owners can revoke links early. The link works on other devices, and anyone with it can view codes until it expires or is revoked.

Why is my verification code not working?

Check that you copied the correct setup key, that your computer clock is accurate, and that the code has not expired. Keep the algorithm, digit count, and refresh period from the original authenticator link. This tool supports TOTP, not counter-based HOTP.