Online authenticator frequently asked questions

Google Authenticator is Google’s official authenticator app. Google 2-Step Verification is a security feature for Google accounts. TOTP (Time-based One-Time Password) is a standard for codes computed from a shared secret and a time window. 2FA is the general term for two-factor authentication.

Find the authenticator setup data in the service’s two-step verification settings. Copy its Base32 secret or otpauth URI, paste it into the authenticator, and add the account. The tool then generates a code from the current time.

Base32 secrets use a 30-second window and six digits by default. If an otpauth URI contains a custom period or digit count, the countdown and code follow those settings.

Upload a QR image in the add authenticator dialog to decode it. You can also copy a Base32 secret or otpauth URI from the service’s two-step verification settings and paste it into the field.

Account data is always stored as AES-256-GCM ciphertext in this browser and is not uploaded to AuthTool servers. With password protection on, enter your password whenever you open the page; decrypting the authenticated ciphertext verifies it. The password itself is never stored or uploaded, and forgotten passwords cannot recover accounts. With protection off, a random unlock key is stored alongside the ciphertext so the list opens automatically. Remove accounts or clear this site’s browser data to delete saved content.

Check that the secret belongs to the right account, make sure your device clock is synchronized, and enter the code before it expires. Some services use different digit counts or time windows; follow their setup details.