TOTP Generator

The tool computes TOTPs from a shared secret following RFC 6238, enabling testing and integration of 2FA flows without hardware tokens. It accepts a base32 secret, digits (6 or 8), an algorithm (SHA1, SHA256, SHA512), and a time step (default 30 seconds). It produces a decimal code that can be used for verification in MFA workflows and for validating server-side OTP logic. Conceptually, the secret is converted to bytes, an HMAC is computed against an 8-byte counter derived from the current time, and dynamic truncation yields a 31-bit value which is reduced modulo 10^digits to form the OTP. The system supports calculating codes for the current time or adjacent time steps to accommodate clock drift. It is a pure computation tool and does not store secrets or render any UI. This makes it suitable for automated tests, integration checks, and security audits where deterministic OTP results are required. Distinct advantages include configurable time_step, digits, and algorithm, along with the ability to generate codes for multiple accounts in a single run for quick verification across MFA scenarios. Typical use cases involve validating server-side OTP validation logic, script-based MFA testing, and developers simulating user sign-ins in test environments. A key differentiator is its RFC-aligned accuracy and its lack of persistent state, which supports repeatable test results across environments.