Generate time-based one-time passwords (RFC 6238 TOTP) from a shared secret key, just like Google Authenticator or Authy. Implements HMAC-SHA1 via the Web Crypto API. Your secret never leaves the browser.
Paste the secret from your QR setup — typically starts with letters and 2-7 digits
10^digits to get the OTP code.Try this with Google Authenticator
Click “New” to make a fresh secret, then add it manually to your authenticator app as a base32 secret with 30s period and 6 digits. The code shown here will match what your app displays.