Technical Specifications & Architecture
Check six-digit codes at 30-second intervals
This tool decodes a Base32 secret and calculates TOTP using HMAC-SHA1 and your device clock. The interface uses six digits and a 30-second step; SHA-256, SHA-512 and custom periods are not supported. The account must use the same secret and settings.
If a code is rejected, check automatic date/time settings and the account configuration. The countdown shows the next local code change. The service decides its tolerance for clock drift and reused codes.
The initial secret is a public demonstration key: never register it with a real account. New secrets use 160 random bits from Web Crypto, encoded as 32 Base32 characters. Generating a secret does not register it with any service. Anyone who knows the secret can calculate the same codes.
The calculation is checked against the SHA-1 vectors in RFC 6238 Appendix B. This page is not a secret vault or authentication service.