How to use TOTP / HOTP
- 1. Create a Base32 secret. Or paste one from your app.
- 2. Read the live code. It refreshes every period.
- 3. Copy the otpauth URI. QR tool can encode it.
- 4. Verify a code. Window of 1 period.
About this tool
TOTP is what authenticator apps compute: HMAC of a time counter. Generating codes here is for local tests, not for storing production 2FA secrets in a browser tab forever.
otpauth URI
issuer, secret, period, digits. Google Authenticator and most apps understand this URI.
Clock skew
If codes fail, this machine's clock is the first suspect.
Code examples
URI
otpauth://totp/PureDevKit:[email protected]?secret=...