Common setup formats
Enter a Base32 secret, paste an otpauth:// URI, or choose a QR image to import authenticator settings.
A clear and simple online authenticator
AuthTool provides a TOTP-based verification code generator. Enter a Base32 secret or otpauth URI to get a live code in your browser for sign-ins that support TOTP two-step verification.
A direct way to generate two-factor codes
After you enable two-step verification, the service provides a shared secret or authenticator URI. Add it to AuthTool, and your browser will generate a current code for signing in to services that support TOTP. Base32 secrets use six-digit codes with a 30-second period by default; otpauth URIs can include custom settings.
Account names, secrets, and verification settings are processed in this browser. Account data is always encrypted with AES-256-GCM, is not uploaded to AuthTool servers, and does not sync across devices. With password protection on, enter your password to decrypt and view accounts. Vault data cannot be recovered if you forget the password.
Codes refresh automatically
Each account refreshes its code according to its TOTP period and shows how long the current code remains valid.
Names and standards
Google Authenticator is Google’s official authenticator app.
Google 2-Step Verification is a two-step sign-in security feature for Google accounts.
2FA is short for Two-Factor Authentication, a general term for identity checks using two factors.
TOTP is short for Time-based One-Time Password, a standard that generates one-time codes from a secret and a time window.
Account names, TOTP secrets, and codes are processed locally in your browser. Account data is encrypted with AES-256-GCM on this device and is not uploaded to AuthTool servers.
Use the online authenticator