Web Authenticator — TOTP (Google Authenticator-like)

Account name

Issuer (optional)

Secret (base32)

Digits

How it works

This page generates TOTP codes using RFC 6238 — the same algorithm Google Authenticator and Authy use. Add an account by entering a Base32 secret and account name. The code refreshes every 30 seconds.

Export/Import: Use "Export JSON" to backup your accounts. Keep secrets safe.

Security note: This is a demo single-file implementation. For production, host over HTTPS, avoid storing secrets in cleartext, and prefer native apps or hardware authenticators for high-value accounts.

Tips:

Enter the secret displayed by the service you're enabling 2FA for.
If you have a QR code, open it in a separate tool to read the secret or use a phone authenticator app.