2FA QR Code Generator (otpauth:// TOTP)

Authenticator apps such as Google Authenticator, Microsoft Authenticator, Authy and 1Password are set up by scanning a QR code that holds an otpauth:// link with a shared secret. This tool creates that secret (160 random bits, the recommended size) or uses yours, builds the link in the Key URI format with the issuer and account name, draws the QR code as a PNG, checks that it scans back correctly, and shows the code the app should display right now.

How to use this tool

1. Enter the issuer (your service) and the user’s account name.
2. Leave the secret blank for a new one, or paste an existing Base32 secret.
3. Keep SHA-1, 6 digits and 30 seconds unless all your users’ apps support other settings.
4. Download the QR code or scan it, then compare the app’s code with Current code.

Formula

otpauth://totp/Issuer:account?secret=BASE32&issuer=Issuer[&algorithm=SHA256][&digits=8][&period=60]

The label and issuer are percent-encoded, the secret is unpadded Base32, and settings at their defaults are left out. The current code is TOTP (RFC 6238): HMAC of floor(time ÷ period), truncated to the chosen number of digits.

Example

For issuer Example, account alice@example.com and secret JBSWY3DPEHPK3PXP, the link is otpauth://totp/Example:alice%40example.com?secret=JBSWY3DPEHPK3PXP&issuer=Example — the same string the Python library pyotp builds.