Generate test TOTP (Time-based One-Time Password) secrets and sample codes using the SHA-1 algorithm. Perfect for testing 2FA implementations, QA workflows, and authentication system development without needing real user accounts.
Create unlimited results with our free interactive generator. No signup required.
Open 2FA/TOTP Generator →SHA-1 is the default HMAC algorithm used in TOTP as defined in RFC 6238 and RFC 4226. Google Authenticator, Authy, and most popular authenticator apps use SHA-1 by default. Despite SHA-1 being deprecated for general cryptographic use, it remains the universal standard for TOTP compatibility across the broadest range of authenticator apps and services. TOTP works by computing HMAC(secret, time_step) where the time step changes every 30 seconds. The resulting hash is truncated to a 6-digit code. Our generator creates realistic test secrets in Base32 format (compatible with QR code provisioning URIs) and sample codes for testing purposes only.
Need real 2FA for your accounts?
Set up secure two-factor authentication with a trusted authenticator app