Loading…
Loading…
Get live 2FA codes from a TOTP secret or otpauth:// link, check a code, or create a new secret with a QR code for authenticator apps. RFC 6238.
Also covers: 2FA code generator · TOTP generator · Authenticator code · otpauth QR code
The setup key shown under the QR code (often “can't scan?”), or the full otpauth:// link.
Everything runs in your browser — nothing you type or generate is sent anywhere. Codes depend on your device's clock — if they're rejected, check it's set automatically. Anyone with this secret can generate your codes: don't paste secrets on shared computers, and keep your authenticator app as the main copy.
Codes
Enter a 2FA secret to see the current code.
Enter the setup key (the text under a 2FA QR code) or a full otpauth:// link. Links include their own settings; for a bare key, the standard 6 digits every 30 seconds is preselected.
The current code updates live with a countdown, plus the next one. Or switch to Create a new secret to set up 2FA for your own app, with a QR code to scan.
TOTP codes depend on the time, so check your device's clock is set automatically. Also check the settings: some services use 8 digits, 60 seconds, or SHA-256.
Anyone with the secret can make your codes, so treat it like a password. This tool runs entirely in your browser and never sends or stores it — but for everyday logins, keep your secrets in an authenticator app.
Time-based One-Time Password (RFC 6238): your app and the service share a secret and each compute a code from it and the current time, so codes match without any network connection.
No. Everything is generated and processed in your browser with its built-in cryptography. Nothing you type or generate is uploaded, logged, or stored.
Passwords
Generate strong random passwords in your browser: choose length and character types, skip look-alike characters, and make up to 500 at once.
Passwords
Generate strong, memorable passphrases from the EFF's 7,776-word list, picked with secure randomness. Choose word count, separators, and capitals.
Passwords
Generate random 4, 6, or 8-digit PINs that skip easy guesses like 1234, 1111, years, and dates. Secure randomness, generated in your browser.
Passwords
Check how strong a password really is: estimated crack times, the words and patterns that make it guessable, and tips to improve it. Never leaves your browser.
Keys
Generate random strings, API keys, and secret keys: pick the length and characters (hex, Base64url, alphanumeric, custom) or a key size in bytes. Cryptographically secure.
Hash
Generate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE, and CRC32 hashes of text as you type, create HMAC signatures, and check a hash for a match.