ffee All tools
EN 中文 FR DE

TOTP Verifier

Check a one time password against a Base32 secret and see which time step matched.

Verify a TOTP code

Result: —
Matched step: —
Seconds left in this step: —
Clock: —
Codes are generated with the Web Crypto API; a window of one step either side absorbs small clock differences.

How to use the TOTP Verifier

  1. Paste the Base32 secret that your authenticator uses.
  2. Choose the digit count, period, algorithm and the allowed time window.
  3. Verify a code, or click Show current code to display the live one.

Features

Advertisement

More tools

Password Strength Checker Text Encrypt and Decrypt HMAC Generator Base32 Encoder Base58 Encoder Base85 Encoder XOR Cipher RSA Encrypt and Decrypt File Encryptor ROT47 Cipher Text to Binary Cipher Salt Generator

Frequently Asked Questions

Common questions about the free online totp verifier.

A TOTP is a short numeric code derived from a shared secret and the current time, so it changes every thirty seconds and cannot be reused.
The current time is divided by the period to give a counter, that counter is signed with the secret using HMAC, and a short decimal code is cut out.
A window lets the verifier accept the previous and next time step, which tolerates a phone clock that is slightly ahead of or behind the server.
Only paste a test secret. Everything is computed locally in your browser, but a real secret still deserves to be kept private.
Base32 turns arbitrary key bytes into letters and digits that are easy to type, which is why authenticator apps usually display secrets that way.
The usual reasons are a mistyped secret, a different digit count, a different period, a different algorithm, or a device clock that is far out.
Click the load test vectors button. The tool fills in the standard secret and compares six published timestamps with their expected codes.
The result panel shows the seconds remaining in the current step, so you know how long the displayed code will stay valid.
Yes. Once the page is loaded, every calculation uses only your browser and no network requests are made.

Last updated: October 10, 2026