Accstall

2FA Generator

Paste a Base32 secret or an otpauth:// URI. Get the current 6-digit TOTP code and the next window. Compatible with Google Authenticator, Authy, and any RFC 6238 SHA1 6/30 authenticator.

Privacy

Runs in the browser. The secret is never uploaded, logged, or written to storage.
SHA1 / 6 digits / 30 seconds only. Other otpauth settings are rejected so a plausible wrong code is never shown.
A ?secret= query is stripped on load. Do not put a TOTP secret in a shareable link.

2FA secret or otpauth URI

Spaces and dashes are ignored. otpauth URIs that ask for 8 digits, SHA256, or a period other than 30 seconds are rejected.

This is not a valid Base32 secret yet. It should only contain the letters A–Z and the digits 2–7.

This otpauth URI asks for a format this tool does not generate (6-digit SHA1 / 30 seconds only). Showing a code anyway would be the wrong code.

Could not reach the server clock. Codes use your device time instead.

A secret in the page URL was removed. Never share 2FA secrets in a link.

Current code

——— ———

–

About to expire — if the login fails, wait for the next code.

Open this index.html locally. Codes use your device clock. A wrong OS clock yields wrong codes. The live page at Accstall can offset from a server clock.

Sister tools: account line parser · cookie converter