Your secret never leaves the browser
Authenticator Code Generator
Paste any TOTP secret key to instantly see your live 6-digit code and the seconds until it rotates.
000 000
FAQ
Is my 2FA secret uploaded?
No. Codes are computed in your browser with the Web Crypto API. The secret never leaves this tab and is not stored.
Where do I find the TOTP secret?
When enabling authenticator 2FA, open “can’t scan QR code” / “enter setup key”. That base32 string is the secret.
Why was my code rejected?
Usually a wrong secret, unusual settings (SHA-256 / 8 digits), or a device clock that’s off. Sync your clock and try again.
Should I keep secrets here permanently?
No. Use this for setup checks or a one-off login on a machine you trust. Day-to-day, keep secrets in an authenticator app or encrypted vault.
Free online TOTP / 2FA code generator
PandaMail’s authenticator tool generates standard RFC 6238 TOTP codes entirely in your browser. Paste a setup key, copy the 6-digit code, done.