2FA Code Generator
Paste your secrets to generate TOTP codes, one key per line. Everything stays in your browser. Never uploaded. Never saved.
Your secret keys
One key or many, one per line
An independent, refreshing code for every key
Paste your keys and choose Generate codes
A SIMPLE WORKFLOW
How to generate a 2FA code online
- 01
Paste your secret
Enter your own Base32 secret or TOTP setup URI, one per line.
- 02
Match the settings
SHA-1, six digits and 30 seconds are common. Use your account's configuration.
- 03
Generate and verify
Click Generate, then copy and use the code before it expires. Clear the tool when finished.
UNDERSTAND TOTP
One secret. A code that changes with time.
TOTP (Time-based One-Time Password) combines a shared secret with the current time step using HMAC. A website or app verifies the code with the same configuration, without retrieving your key from this tool. It is a common form of two-factor authentication (2FA), adding a verification step alongside your password.
Use it to check authenticator settings, test sign-in flows, or temporarily verify your own account in an isolated browser. Keep your device clock accurate and protect the original secret.
Explore the AdsCrawl cloud browser2FA & TOTP questions
How do I generate 2FA codes for multiple keys?
Paste one Base32 secret or otpauth setup URI per line, then generate. Enter one line for a single key, or multiple lines for multiple keys. Up to 50 entries can be processed at once. Blank lines are ignored and results keep their original line numbers. Each code refreshes independently and can be copied separately. An invalid line does not block valid entries. Editing or clearing resets previous results; all secrets stay local.
What is the difference between a 2FA secret and a verification code?
A secret is the long-lived credential provided when you enable two-factor authentication, usually encoded in Base32. A TOTP code is calculated from that secret and the current time, typically changing every 30 seconds. Keep the secret private. This tool needs the secret; it cannot recover one from a verification code.
Is my secret uploaded or saved?
No. Secrets and codes are processed only in this page's memory. They are not sent to a server or written to cookies, browser storage or the URL. Analytics and live chat are disabled on this page. Clear, reload or leave the page to reset it; Copy only copies the current code. Use a trusted device and browser extensions.
Why is my 2FA code not working?
Check that the secret is complete, your device clock is automatically synchronized, and the algorithm, digits and period match the service. Defaults are SHA-1, six digits and 30 seconds. An otpauth URI supplies its own settings, with defaults for omitted values. Near expiry, wait for the next code instead of retrying an expired one.
Can this replace Google Authenticator or another authenticator?
This RFC 6238 TOTP generator is useful for temporarily checking your own key, testing a two-factor authentication integration or working in a browser. It does not store accounts, back up secrets or recover access. Use a trusted dedicated authenticator for everyday sign-ins, and always match the service's settings.
Does it support SMS, HOTP, QR codes or recovery codes?
It accepts Base32 secrets and otpauth://totp/ setup URIs only. It cannot receive SMS, scan QR codes, generate a provider's recovery codes or produce counter-based HOTP codes. It cannot bypass account verification or recover a lost secret.
Do I need an account or an installation?
No account, registration or extension is required. Open the HTTPS page and generate codes in your browser. The calculation itself needs no network connection; reopening the page still requires loading the website. Only use keys for accounts you are authorized to access.
Technical references:RFC 6238 (TOTP)·Key URI Format