ToolbitTOTP and 2FA Code Generator
Turn a shared secret into the six-digit code your login is asking for, without installing an authenticator app. Useful for testing a 2FA integration you are building.
What the TOTP Generator does
- RFC 6238 TOTP with configurable period and digit count.
- SHA-1, SHA-256, and SHA-512 algorithm support.
- Live countdown showing when the current code rotates.
- Accepts Base32 secrets and otpauth:// URIs.
How to use it
- Paste your Base32 secret or otpauth:// URI.
- Adjust the period and digits if the service is non-standard.
- Copy the current code before the countdown runs out.
Why it runs locally
Toolbit has no backend. The TOTP Generator is implemented with standard browser APIs, so your input is processed in the tab and never uploaded, logged, or retained. That is what makes it safe to paste real data into — and it is also why the tool keeps working with the network disconnected, once you have installed Toolbit as an app.
Frequently asked questions
- Is this a safe replacement for an authenticator app?
- For testing an integration, yes. For your own production accounts, a dedicated authenticator app or hardware key keeps the secret in secure storage rather than in a browser tab.
- Is my secret uploaded?
- No. Codes are computed locally, and the secret is never transmitted or persisted.
- Why does my code not match the server?
- Almost always clock skew. TOTP depends on system time — check that your machine's clock is synchronised.