jaden / totp-generator

Generates TOTP tokens in the browser

Generate time-based one time passwords in the browser

Demo

This page lets you easily generate a time-based one time password (TOTP) entirely in the web browser in case you ever lose access to your phone.

It uses the excellent otpauth package, downloaded from raw.githubusercontent.com/hectorm/otpauth/master/dist/otpauth.umd.min.js.

Providing parameters in the URL

Private key

You can provide the key in the URL using the URI fragment or a query parameter, for example: https://totp.danhersam.com/#/KEY or https://totp.danhersam.com?key=KEY

Additional parameters

You can also pass the token digits, period and algorithm using a query string in the URL, for example: https://totp.danhersam.com/?digits=6&period=60&algorithm=SHA256&key=KEY

See supported hashing algorithms for the complete list.

Import using QR codes

To make it easier to import Authy entries into another authenticator app, generate QR codes using my QR code generator.

Other Resources

• https://www.pommepause.com/2014/10/how-to-extract-your-totp-secrets-from-authy/
• winauth/winauth#545
• https://randomoracle.wordpress.com/2017/02/15/extracting-otp-seeds-from-authy/
• https://gist.github.com/tresni/83b9181588c7393f6853
• https://gist.github.com/Ingramz/14a9c39f8c306a2d43b4

totp-generator's Issues

Thank you for creating this app

I referenced your app on my project. It helped me a lot to debug erros while I was developing. @jaden

Is it possible to implement a feature that will automatically copy the otp to clipboard when touch it ?

Support the specification of the 'algorithm' parameter

Currently, the 'algorithm' parameter setting is hardcoded to SHA1: https://github.com/jaden/totp-generator/blob/master/public/js/app.js#L58

It could be very useful to have this passed via an input through the UI, similarly to the secret parameter. For example, this URL is a valid TOTP initiator:

[TOTP_BASE_URL]?algorithm=SHA256&digits=6&issuer=Company&period=30&secret=6M2F7ACSQA898A7842H4EJAODWK53SD

But it could not be passed to the totp-generator app, since the SHA256 is unsupported.

base32 validation

If input a string that is not valid base32, it continues to show the results for the last seen valid base32 string that's no longer displayed.

Solution could be either reporting an error instead of displaying a number, or having a field showing the key being used without spaces

Show next number for servers that are too tight with the timing

A few servers only allow exactly the code for this half minute or you might have an issue that makes copying the number tooo slow. Showing the next number gives some more seconds on poorly implemented servers.

Also pass additional parameters from hash?

besides KEY like https://totp.danhersam.com/#/KEY, I wonder if we can pass additional parameters from hash, like https://totp.danhersam.com/#/KEY/digits=6/period=60/algorithm=SHA256?

Add pages

For simply save link in favs , likes this https://totp.danhersam.com/JBSWY3DPEHPK3PXP code aumatically pasted

Feature QR code

Thanks for the great online generator!

Would be nice to have QR code to show

Can be used QR generator by google, this is a basic request syntax
https://www.google.com/chart?chs=200x200&chld=M|0&cht=qr&chl=otpauth://totp/labelexample:userexample?secret=A4N3R5N4HUZPSGKDOQRH6CQGEDI45PF2&issuer=issuerexample

Additionally, I ask for a URI update with the currently entered secret

Store the secret in localstorage

Great tool, if you could store the secret in local storage it would be even better 👍

Generating with custom secret not working

1. input new custom secret.
2. wait 30 seconds
3. nothing changes.