TOTP is a time-based one-time password scheme defined in RFC 6238. It generates a short code from a shared secret and the current time; that code changes every period and is used in two-factor authentication.
Generate two-factor TOTP authentication codes from a secret, just like an authenticator app.
TOTP (Time-based One-Time Password, RFC 6238) is the algorithm behind the authenticator apps used in two-factor verification. It combines a shared secret with the current time and applies an HMAC to produce a short code that changes every period (usually 30 seconds). This tool generates exactly that code from a base32 secret, lets you tune digits, period and algorithm, and builds the otpauth URI that apps read from a QR code. Everything runs locally, which makes it handy for debugging 2FA integrations without exposing the secret.
Paste the code into your HTML and the tool shows up on your page, without J-Kit's navigation and ads. It still runs in the browser of whoever visits your site.
<iframe
src="https://jkit.tools/embed/en-US/totp-generator"
width="100%"
height="600"
style="border:0"
loading="lazy"
title="TOTP / 2FA Generator"
></iframe>These references help contextualize formulas, standards, APIs and limitations used on this page. They do not replace professional validation when a result has legal, financial, medical or operational impact.
TOTP is a time-based one-time password scheme defined in RFC 6238. It generates a short code from a shared secret and the current time; that code changes every period and is used in two-factor authentication.
—otpauth://totp/J-Kit:user%40example.com?secret=JBSWY3DPEHPK3PXP&algorithm=SHA1&digits=6&period=30&issuer=J-KitThe secret and codes are generated only in the browser with WebCrypto. Nothing is sent to any server.