Question 1

What is TOTP / 2FA?

Accepted Answer

TOTP (Time-based One-Time Password) is the algorithm behind apps like Google Authenticator and Authy. It generates a new 6-digit code every 30 seconds from a shared secret key, adding an extra layer of security to your accounts.

Question 2

Is my secret key safe?

Accepted Answer

Yes. Everything runs 100% in your browser — your secret key is never sent to any server. You can verify this by checking the network tab in your browser's developer tools. No data leaves your device.

Question 3

How do I get my 2FA secret key?

Accepted Answer

When you set up 2FA on a service, you're usually shown a QR code and/or a text key (a string of letters and numbers like "JBSWY3DPEHPK3PXP"). That text key is your TOTP secret. Some account providers also include it in your credential data.

Question 4

Why isn't my code working?

Accepted Answer

The most common reason is clock skew — make sure your device's time is synchronized. Also double-check you've copied the full secret key with no extra spaces.

2FA Code Generator

Frequently Asked Questions