ToolCraft
HomeAI ToolsDeveloper ToolsUnit ConverterImage Tools
ToolCraft

© 2026 ToolCraft. All rights reserved.

Privacy PolicyTerms of Service
DMCA.com Protection Status
HomeSecurityTOTP / 2FA QR Generator

Security

Password GeneratorHash CheckerPassword Strength CheckerEncryption ToolSSL Certificate Decoderhtpasswd GeneratorCSP GeneratorCORS Config GeneratorTOTP / 2FA QR Generator

TOTP / 2FA QR Generator

Create otpauth:// secrets and QR codes for authenticator apps — Google Authenticator, Authy, 1Password compatible

Ctrl+Shift+CCopy output

Configuration

Google Authenticator ignores algorithm/digits/period and always assumes SHA1 / 6 digits / 30s. Use Authy, 1Password, or Bitwarden for full compatibility.

Scan with your authenticator app

Enter a valid secret to generate a QR code.

Current code

30s
—

otpauth:// URI

otpauth://totp/My%20App:user%40example.com?secret=NQKZF5ZZB66CUQ4FY7QX2GLK4IKYG2K3&issuer=My+App&algorithm=SHA1&digits=6&period=30

View all Security

View all
100% offline

Password Generator

Generate strong, random passwords with customizable options

Security
100% offline

Hash Checker

Compute and verify MD5, SHA-1, and SHA-256 hashes

Security
100% offline

Password Strength Checker

Analyze password strength with detailed scoring and improvement tips

Security
100% offline

Encryption Tool

Encrypt and decrypt text using AES-GCM with a password

Security

What is the TOTP / 2FA QR Generator?

TOTP (Time-based One-Time Password, RFC 6238) is the algorithm behind every modern authenticator app. This tool helps you create the otpauth:// URI and matching QR code that a user scans to enroll your service into Google Authenticator, Authy, 1Password, Bitwarden, or any RFC-6238-compliant app. Provide an account name and issuer, generate or paste a base32 secret, and the QR code updates in real time alongside a live preview of the 6-digit code and its countdown — handy for testing your authenticator integration before shipping it. Everything (secret generation via Web Crypto, HMAC-SHA1/256/512 computation, QR rendering) happens in your browser; the secret never touches a server.

FAQ