TOTP Secret Key Generator
Generate Base32 2FA TOTP secret keys for authenticator apps.
API & Secret Key Generator
rxd_live_a2bac11edbfe445f92adf476e08dd436
About TOTP Secret Key Generator
The 2FA TOTP Base32 Secret Key Generator creates cryptographically secure 160-bit and 256-bit random Base32 shared secrets formatted specifically for Google Authenticator, Authy, 1Password, and Microsoft Authenticator.
How to Use TOTP Secret Key Generator
Step 1
Select secret length (160 bits standard or 256 bits maximum security).
Step 2
Click "Generate Secret".
Step 3
Copy the generated Base32 string to store in your backend database.
Practical Use Cases for TOTP Secret Key Generator
User Onboarding & 2FA Enrollment Setup
Generate high-entropy random Base32 seed keys to store in database user records when users enable two-factor authentication.
Generating Backup Emergency 2FA Keys
Create standardized Base32 secrets for hardware security tokens and emergency disaster recovery vaults.
Input & Output Examples
Generating 160-bit Base32 TOTP Secret
Bit Length: 160 bits (20 bytes / 32 characters in Base32)
Secret: JBSWY3DPEHPK3PXPJBSWY3DPEHPK3PXP (Formatted with space grouping for easy typing: JBSW Y3DP EHPK 3PXP)
Key Features & Performance
- ✓Generates 160-bit (Google Authenticator standard) and 256-bit (High Security) secrets.
- ✓Encodes into RFC 4648 Base32 alphabet (`A-Z`, `2-7`).
- ✓Provides human-readable spaced grouping (e.g. `ABCD EFGH JKLM NPQR`).
- ✓100% Client-Side generation using Web Crypto CSPRNG.
- ✓1-Click Copy raw and formatted secret keys.
Key Terminology & Definitions
Base32 Encoding (RFC 4648)
A 32-character binary-to-text encoding format using letters A–Z and digits 2–7, omitting digits 0, 1, 8, 9 to avoid visual confusion with letters.
160-bit Secret Entropy
The standard 20-byte seed key size required by Google Authenticator and RFC 6238 for optimal SHA-1 HMAC computation.