OTPAuth One-time Password JS Library Demos

Live token

------

Waiting for token

Issuer

Account label

Secret · Base32

Use a sample key here. Keep real account secrets private.

Hash algorithm

Token length

Period · seconds

Random secret · bytes

Include issuer in URI label

Custom clock

Clock source

Unix timestamp · milliseconds

59,000 ms matches the first RFC 6238 test time.

Verify a token

Token to validate

Search window · steps each way

Reject counters at or below · optional

Enter a token to check its counter offset.

Generated key URI

Import a key URI

Input encoding

Secret value

Compare the current token with a custom HMAC provider backed by Web Crypto. Available for SHA1, SHA256, SHA384, and SHA512.