← Back to DevKit

TOTP Authenticator

TOTP · ENCODE & SECURITY

Local TOTP codes per RFC 6238 (HMAC-SHA1, refreshed every 30s) with multiple accounts and QR import; keys are stored only on this device — avoid shared computers.

Keys are stored only in this browser — do not use on shared or public computers.
Accounts
Current code
------
30s
Based on RFC 6238, computed locally with WebCrypto HMAC-SHA1 — keys never leave the browser.
Embed code

Paste the code below into your page to embed this tool as an iframe (nav and footer auto-hidden).

Heightpx
This tool runs entirely in your browser — input never leaves your device. Press Ctrl K to switch tools anytime.