TOTP Tester

TOTP is based on a shared secret and the current Unix timestamp. Both your authenticator app and your server run the same algorithm with the same time window. If clocks drift or the secret is malformed, users will see "invalid code" errors even when they type correctly.

This tester helps you validate those implementation details quickly. Paste the Base32 secret, choose the same period and digit length your server expects, and compare this generated code against the one in your authenticator app. If they match, your core configuration is correct.

The verify box checks the entered token against the current window and a small tolerance around it. That mirrors practical server-side behavior where one previous or next time step is often accepted to account for small clock differences.