CyberNew

2FA / TOTP Code Tester

Paste a test Base32 secret to see the current 2FA code and countdown. For developers. Runs entirely in your browser, nothing is stored.

Use only test secrets. Never paste a real account's secret into any website.

How this works

Implements RFC 6238 TOTP with your browser's Web Crypto HMAC, the same maths as Google Authenticator.

What we never see

The secret. It is processed only in this tab and never sent or saved.

Base32 secret

Digits

Period (s)

Algorithm

Need more than a free tool?

Qawex builds, secures and grows websites and systems. Talk to a person.

Related tools

Strong random passwords with a strength meter. Generated on your device, never sent anywhere.

SHA-1, SHA-256, SHA-384 and SHA-512 hashes, computed in your browser.

Read a token's header, payload and expiry. Decode only, nothing leaves your browser.

Check a password against billions of leaked ones. Only a 5-character fingerprint prefix is ever sent.