TOTP QR Code Generator

Create a standard otpauth:// TOTP setup QR code for authenticator apps, then verify the live 6-digit code with the same secret.

TOTP QR Code Generator: Enter an issuer, account name, and secret, or generate a new Base32 secret. The tool creates a scannable TOTP QR code and live OTP code for Google Authenticator, Authy, 1Password, Bitwarden, and other RFC 6238 apps.

OTP code generator

Generate and validate time-based OTP (one time password) for multi-factor authentication. totp generator, totp qr code generator.

Secret (base32)

Technical details

Secret in hexadecimal

9f46f04e3d53f4877017

Epoch

1780449015

Iteration — Count

59348300

Padded hex

000000000389954c

Key Takeaways

Creates otpauth://totp setup QR codes for 2FA enrollment
Compatible with Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden, Aegis, and FreeOTP
Supports standard 6-digit, 30-second TOTP settings
Can also test SHA-256, SHA-512, 8-digit, and custom period settings
Secrets are generated and rendered in the browser and are not uploaded

What is TOTP QR Code Generator?

TOTP QR Code Generator — A TOTP QR Code Generator creates an otpauth:// setup URI and QR code that authenticator apps can scan to enroll a time-based one-time password secret.

Use this TOTP QR code generator when you are building, testing, or debugging two-factor authentication enrollment. A TOTP QR code is just a visual encoding of an otpauth:// URI containing the issuer, account name, Base32 secret, algorithm, digit count, and time period. Scan the QR with an authenticator app, then compare the live code shown by the app with the code generated here to confirm your 2FA setup is correct.

How to Use TOTP QR Code Generator

1
Enter the issuer or app name that should appear in the authenticator app.
2
Enter the account label, such as a username or email address.
3
Generate a Base32 secret or paste an existing test secret.
4
Scan the generated QR code with Google Authenticator, Authy, 1Password, Bitwarden, or another TOTP app.
5
Compare the live OTP code and countdown to confirm the setup works.

Key Features

otpauth:// URI generation

TOTP QR code rendering

Base32 secret generation

Live OTP code verification

Previous/current/next code windows for clock drift debugging

No server upload for generated secrets

Use Cases

Testing 2FA enrollment screens during app development

Creating a QR code from an existing Base32 TOTP secret

Debugging authenticator app setup issues

Validating issuer, label, period, digit count, and algorithm settings

QA testing login flows that require rotating OTP codes

About TOTP QR Code Generator

What Is Inside A TOTP QR Code?

The QR code contains an otpauth URI, usually in this format: otpauth://totp/Issuer:account?secret=BASE32SECRET&issuer=Issuer&algorithm=SHA1&digits=6&period=30. Authenticator apps read that URI and store the secret locally.

Safe Testing Guidance

Use generated test secrets for development and QA. Do not paste production 2FA secrets from real accounts into online tools unless your security policy explicitly allows it. For production apps, generate secrets server-side and show the QR only to the enrolled user.

Common Mismatch Causes

If codes do not match, check device time sync first. Then verify the Base32 secret, issuer/account label, algorithm, digit count, and period. Most consumer authenticator apps expect SHA-1, 6 digits, and 30-second windows.

Frequently Asked Questions

What apps can scan this TOTP QR code?: Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden, Aegis, FreeOTP, and most apps that support the otpauth:// URI scheme can scan standard TOTP QR codes.
Is a TOTP QR code the same as an OTP QR code?: Usually yes in common search usage. Technically, TOTP is a time-based OTP standard, while OTP is the broader category. Most authenticator QR codes are TOTP QR codes.
Does this upload my secret to a server?: No. The QR generation and OTP calculation run in your browser. For real production secrets, still follow your organization's policy and prefer server-side enrollment flows.
Can I use this for Google Authenticator?: Yes. Use the default SHA-1, 6-digit, 30-second settings for best Google Authenticator compatibility.
Why does my scanned authenticator code not match?: Most mismatches come from clock drift, wrong Base32 secret, SHA-1 vs SHA-256 mismatch, 6 vs 8 digit mismatch, or using a non-30-second period.

Loading your tools...

What Is Inside A TOTP QR Code?

Safe Testing Guidance

Common Mismatch Causes

Frequently Asked Questions

What apps can scan this TOTP QR code?

Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden, Aegis, FreeOTP, and most apps that support the otpauth:// URI scheme can scan standard TOTP QR codes.

Is a TOTP QR code the same as an OTP QR code?

Usually yes in common search usage. Technically, TOTP is a time-based OTP standard, while OTP is the broader category. Most authenticator QR codes are TOTP QR codes.

Does this upload my secret to a server?

No. The QR generation and OTP calculation run in your browser. For real production secrets, still follow your organization's policy and prefer server-side enrollment flows.

Can I use this for Google Authenticator?

Yes. Use the default SHA-1, 6-digit, 30-second settings for best Google Authenticator compatibility.

Why does my scanned authenticator code not match?

Most mismatches come from clock drift, wrong Base32 secret, SHA-1 vs SHA-256 mismatch, 6 vs 8 digit mismatch, or using a non-30-second period.

Tools

Finance

AI

Media

Marketing

More

TOTP QR Code Generator

OTP code generator

Technical details

Key Takeaways

What is TOTP QR Code Generator?

How to Use TOTP QR Code Generator

Key Features

Use Cases

About TOTP QR Code Generator

What Is Inside A TOTP QR Code?

Safe Testing Guidance

Common Mismatch Causes

Frequently Asked Questions

TOTP QR Code Generator

OTP code generator

Technical details

Key Takeaways

What is TOTP QR Code Generator?

How to Use TOTP QR Code Generator

Key Features

Use Cases

About TOTP QR Code Generator

What Is Inside A TOTP QR Code?

Safe Testing Guidance

Common Mismatch Causes

Frequently Asked Questions