Disclaimer

The short version: this tool is an auxiliary, not a vault. How you handle your secret keys is the single most important security decision here — and it’s yours.

Secret-key handling is your responsibility

A TOTP secret is the master key to your account: whoever has it can generate valid codes. Entering a seed phrase in any webpage entails a small risk, which is why this site is designed to be auditable — everything happens locally, you can disconnect from the internet after loading the page, and theprivacy policy documents how the browser talks to the network. Nevertheless, you choose where and how to paste your keys, and you remain responsible for keeping the original secret safe (an encrypted password-manager vault is the recommended master copy).

2FA does not replace recovery codes

Never rely on a single authenticator — this one, a phone app, or otherwise — as your only route into an account. When a service shows you backup/recovery codes, save them offline before enabling two-factor authentication. If you lose access to this tool, another device, and your secret key at the same time, the recovery codes are the only thing that can save you.

Not affiliated with third-party services

This site and its guides are independently produced and arenot affiliated with, endorsed by, or sponsored by Discord, GitHub, Steam, Binance, Google, Microsoft, or any other service mentioned. Guides describe publicly documented flows and may become outdated when those services change their interfaces — always defer to the official documentation of the service you are configuring.

No security guarantee

While the generator implements the RFC 6238 standard, we cannot guarantee that any autonomous third party will accept every code, support every parameter combination, or that this site will be available at the moment you need it. Code validation issues are almost always clock drift — verify your device time first.

Educational information only

Explanations of two-factor authentication, TOTP, and related standards on this site are provided for information only and do not constitute professional security advice for your specific circumstances. Consult the security documentation of the services you use for guidance tailored to them.