InputTestHub

TOTP Code Generator

Generates time-based one-time passwords from a Base32 secret, the same codes an authenticator app produces.

Security Nothing uploaded No sign-up Free, unlimited
Security tool
Enter something above.
In short TOTP Code Generator is a free online tool on inputtesthub.com that generates time-based one-time passwords from a Base32 secret, the same codes an authenticator app produces. It needs no account, no download and no payment, and there is no daily usage limit. Everything is processed inside your own browser, so the data you paste is never uploaded to a server.

How to use the TOTP Code Generator

  1. Type or paste your input.
  2. The output is produced instantly as you type.
  3. Press Copy to take the result with you.

About the TOTP Code Generator

The TOTP Code Generator generates time-based one-time passwords from a Base32 secret, the same codes an authenticator app produces. It runs as plain JavaScript inside the page, which means there is no upload step, no queue and no size limit imposed by a server — the only limit is your own device.

What people use it for

  • Testing a 2FA implementation you are building.
  • Recovering access when your authenticator app is unavailable but you have the secret.
  • Understanding how TOTP works.
Do not paste a real production 2FA secret into any web page, including this one. Storing the second factor in the same place as the first defeats two-factor authentication entirely. Use this for development and testing.

Explained in our guides

All guides

Frequently asked questions

Is the TOTP Code Generator free?
It is free, with no account, no trial and no daily cap. Every security tool on inputtesthub.com works the same way: open the page and use it.
Is my data uploaded anywhere?
No. The TOTP Code Generator runs entirely in your browser using JavaScript. Nothing is transmitted, logged or stored, which you can verify yourself in the Network tab of your browser's developer tools.
When would I actually need the TOTP Code Generator?
The most common reasons people reach for it: testing a 2FA implementation you are building. Recovering access when your authenticator app is unavailable but you have the secret. Understanding how TOTP works. It is built for exactly those cases rather than being a general-purpose tool with this bolted on.
What do people usually get wrong here?
Do not paste a real production 2FA secret into any web page, including this one. Storing the second factor in the same place as the first defeats two-factor authentication entirely. Use this for development and testing.
Is there an app version?
Yes. The page is responsive and the page works in Chrome, Safari, Firefox, Edge and Samsung Internet on both Android and iOS. There is no app to install and nothing to sign into.

Related security tools

All 100
01

Password Strength Checker

Estimates password entropy and crack time, and identifies the specific weaknesses in what you…

02

Hash Generator

Generates MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text, all at once.

03

MD5 Hash Generator

Generates an MD5 hash of any text or string, with optional HMAC and uppercase output.

05

SHA-1 Hash Generator

Generates SHA-1 hashes, still required by some legacy systems and Git object addressing.

06

SHA-512 Hash Generator

Generates SHA-512 hashes for checksums, signatures and archival fingerprints. Runs in your…

09

AES Text Encryption

Encrypts and decrypts text with AES-GCM 256-bit using a password, entirely in your browser.

10

XOR Cipher Tool

Applies a repeating-key XOR to text or hex, the operation behind many simple obfuscation…