TOTP / HOTP Generator & Validator

Generate and check time-based (TOTP, RFC 6238) and counter-based (HOTP, RFC 4226) one-time passwords - the codes behind authenticator apps and hardware tokens such as FortiToken. SHA-1/256/512, configurable digits and step. Computed locally with Web Crypto; your secret never leaves your browser.

Identity & tokens

Computed in your browser. Your secret is never sent anywhere.

API endpointGEThttps://ronutz.com/api/v1/totp-hotpDocumented, not served. Opens the specification.

References