Loading page
Tool workspace
Preparing this tool for you.
Tool workspace
Generate secure TOTP two-factor authentication codes in your browser. 100% client-side, works offline, RFC 6238 compatible.
About this tool
Generate secure TOTP two-factor authentication codes in your browser. 100% client-side, works offline, RFC 6238 compatible.
2FA Authenticator generates time-based one-time passwords (TOTP) entirely in your browser. Paste the Base32 secret key a service shows when you enable two-factor authentication — or import its QR code — and get a live 6- or 8-digit code that refreshes every 30 seconds, exactly like Google Authenticator or Authy.
Open 2FA Authenticator on AltFTool — it loads instantly in your browser.
Enter your Base32 secret key, or upload the QR code from the service you're securing.
Optionally adjust the algorithm, digits and period under Advanced Options.
Copy the live code and paste it into the login screen before it refreshes.
Codes are computed with the Web Crypto API in your browser — your secret key is never sent to any server.
Implements the same open TOTP standard used by Google Authenticator, Microsoft Authenticator, Authy and 2FAS.
Switch between SHA1, SHA256 and SHA512, 6 or 8 digits, and 15–60 second periods to match any service.
TOTP (Time-based One-Time Password) is an algorithm defined in RFC 6238 that turns a shared secret key and the current time into a short numeric code. The code changes every 30 seconds and is the mechanism behind most two-factor authentication apps.
Two-factor authentication adds a second step beyond your password. After signing in, you enter a time-based code from an authenticator like this one. Because the code comes from a secret only you hold and expires within seconds, it blocks attackers who only have your password.
No. Every code is generated locally in your browser using the Web Crypto API, so your secret key is never sent to any server. Saved accounts are kept only in this browser's local storage, on your own device, and you can delete them at any time.
Any service that uses the standard otpauth / TOTP format works here, including Google Authenticator, Microsoft Authenticator, Authy, 2FAS, GitHub, AWS, Facebook, Instagram, Discord, Dropbox and Coinbase.
Yes. Once the page has loaded, code generation runs entirely on your device and needs no internet connection.
Yes — it is completely free, open to everyone, and built with privacy first.