← ← All Tools
中文

🔐 TOTP/HOTP Generator

Client-side TOTP/HOTP one-time password generator with SHA-1/256/512, QR code scan & generate, otpauth:// URI parsing, code verification — secrets are not uploaded by the tool

🔒 This tool runs locally in your browser (WebCrypto API). Your secret keys and codes are not uploaded by the tool.

Mode
Secret Key

Paste a Base32 secret or otpauth:// URI to auto-detect and configure

Hash Algorithm

SHA-1 is the default standard, compatible with Google Authenticator and most apps

Digits
Period
Issuer & Account (optional, for URI & QR code)

Click or drop a QR code image containing an otpauth:// URI

More tools you might find useful.

🔐
AES Encrypt/Decrypt
Client-side AES encryption and decryption with GCM, CBC, and CTR modes, PBKDF2 passphrase derivation and raw key input — keys are not uploaded by the tool
🔐
BCrypt Hash Generator & Verifier
Client-side BCrypt password hash toolkit with three tabs: Generate (cost 4-15, $2a/$2b/$2y version selector, 3 output formats), Verify (auto-parses cost/version with OWASP guidance), and Inspect (dissect any bcrypt hash into prefix/cost/salt/hash). Real-time 72-byte truncation warning, progress bar, cancel button, and mobile-friendly chip controls.
🔐
DES / 3DES Encrypt & Decrypt
Client-side DES and 3DES (2-key/3-key) encryption & decryption with zero dependencies. Supports five modes (ECB/CBC/CFB/OFB/CTR) and five padding schemes (PKCS#7/Zero/ANSI X.923/ISO 10126/No Padding). Independent encoding switchers for Key/IV/Input/Output (Hex/UTF-8/Base64), real-time byte-length hints, built-in NIST test vectors, persistent deprecation banner (DES 2005, 3DES Jan 2024), and K1/K2/K3 key visualization. For education and legacy interop only — keys and plaintext are not uploaded by the tool.
#️⃣
Hash Generator
MD5 & SHA Hash Calculator
🔐
HMAC Calculator
Client-side HMAC calculator with SHA-1/256/384/512, UTF-8/Hex/Base64 key formats, text & file input, and HMAC verification

Free online TOTP/HOTP one-time password generator — client-side with WebCrypto API. Supports SHA-1/SHA-256/SHA-512, 6/7/8-digit codes, configurable time step, otpauth:// URI parsing & generation, QR code scan & generate, code verification with time-window tolerance. Secrets are not uploaded by the tool. Compatible with Google Authenticator / Authy.