2FA Code Generator
Enter your 2FA key and get your verification code instantly.
appear here
Your verification code
Click to copy
How It Works
Enter Your Key
Paste the Base32 secret key from your account's 2FA setup page.
Get Your Code
A 6-digit verification code appears instantly. It refreshes every 30 seconds automatically.
Copy & Use
Click the code to copy it, then paste it wherever you need to log in. Your key stays in your browser only.
Your Privacy, Verified
This tool uses the Web Crypto API built into your browser to generate TOTP codes. That means:
- No server contact: After the page loads, no network requests are made. You can verify this in your browser's Developer Tools → Network tab.
- No storage: Your secret key is held only in browser memory while the tab is open. Closing the tab erases it. No cookies, no localStorage, no databases.
- No tracking: No analytics scripts, no third-party resources, no fingerprinting. The page does not phone home.
- Open standard: The code generation follows RFC 6238 (TOTP) and RFC 4226 (HOTP), the same standards Google Authenticator and every major authenticator app use.
If you want to go further, disconnect from the internet after this page loads. It will continue to work offline.
Frequently Asked Questions
Yes. All code generation happens entirely in your browser using the Web Crypto API. Your secret key is never sent to any server, stored in any database, or logged anywhere. You can verify this by checking your browser's network tab — no requests are made after the page loads.
A Base32 secret key is a string of letters (A–Z) and numbers (2–7) that a service gives you when you set up two-factor authentication. It is the shared secret between you and the service. It is usually 16–32 characters long and looks something like JBSWY3DPEHPK3PXP.
When you first enable 2FA on a service, you are usually shown both a QR code and a text version of the secret. The text version is the Base32 key.
Yes. This tool generates the same TOTP codes as Google Authenticator, Microsoft Authenticator, Authy, and any other RFC 6238-compliant authenticator. You just need the Base32 secret key that was shown when you first set up 2FA.
No. Your secret key exists only in your browser's memory while you use the tool. When you close the tab, it is gone. Nothing is saved to your device, no cookies are set, and no data is sent to any server.
SHA-1 (the default for most services, including Google Authenticator), SHA-256, and SHA-512. Most services use SHA-1 with 6-digit codes and a 30-second period.
Yes. After the page loads, no internet connection is needed. TOTP codes are calculated entirely from your secret key and the current time on your device. You can disconnect from the internet and the tool will continue working.