2FA code generator
Paste the 2FA secret key a site gives you (or its otpauth:// link) and this page shows the current 6-digit code, the same one Google Authenticator or Authy would show. It follows the TOTP standard (RFC 6238) and runs entirely in your browser; the key is never sent or stored.
How to use it
- When a site shows the 2FA QR code, click "Can't scan it?" or "Enter key manually" to see the secret key.
- Paste the key above. The 6-digit code updates every 30 seconds, just like Google Authenticator, Microsoft Authenticator or Authy.
- Type the current code into the site to finish setup, then add the same key to an authenticator app on your phone.
Is it safe?
The code is calculated in your browser with the Web Crypto API; the secret is not sent to Ucode or stored. Even so, a 2FA secret is as sensitive as a password. Use this page for testing, QA or a one-off login, and keep your real accounts in an authenticator app or password manager with backup. See how to store backup codes safely and SMS 2FA vs authenticator apps.
Codes not accepted?
- Clock drift: TOTP codes depend on the time. Make sure your device clock is set automatically.
- Wrong settings: almost every site uses 6 digits, 30 seconds and SHA-1. Only change them if the site says so.
- Wrong key: the secret uses letters A–Z and digits 2–7. Spaces are ignored; 0, 1 and 8 are never part of a Base32 key.
Need the SMS code instead?
Some sites still send the first code by SMS before you can switch to an authenticator. Ucode rents private numbers for that step, with an automatic refund if no code arrives.
FAQ
What is a TOTP code?
A time-based one-time password: a 6-digit code computed from a shared secret key and the current time, as defined in RFC 6238. It changes every 30 seconds.
Does this work with Google Authenticator secrets?
Yes. Google Authenticator, Microsoft Authenticator, Authy and most sites use standard TOTP with SHA-1, 6 digits and 30 seconds, which are this tool's defaults.
Is my 2FA secret sent to your server?
No. Everything runs in your browser and nothing is stored. Close the tab when you are done.
Why is my 2FA code wrong?
Usually the device clock is off, or the key was copied incorrectly. Set your clock to update automatically and paste the key again.