TOTP Toolset

  

sha1 version

           sha256 version
This toolset can be used to emulate a hardware token (with SHA256 seeds) and as to perform OTP verification and drift detection . The SHA-1 version of this tool is available here

Features

  • emulates tokens with SHA-256 seeds (i.e. C203)
  • converts hex seed to base32 format
  • generates QR image based on hex or base32 seed key values
  • generates random seed values (i.e. for Token2 programmable tokens)
  • can verify the time drift with customizable skew value
  • creates JSON file for Graph API

We have also developed a fully client-side version of Token2 TOTP Toolset (Token2 TOTP Toolset - local), which can be run locally without accessing any libraries/resources on the Internet (including the QR image generation). The full source code of "Token2 TOTP Toolset - local" is available under our GitHub repository.
If you have a TOTP QR Code and need to calculate OTP from the QR code directly, use our TOTP QR Image decoder service

Seed in base32



QR code

OTP verification & drift detection

--

 926802 
skew ±
SkewOTP
-120 sec.698618
-90 sec.030386
-60 sec.304626
-30 sec.430328
0 sec.⏵926802⏴
30 sec.337609
60 sec.288603
90 sec.626479
120 sec.761542

Seed data

Unix epoch / 30 00000000037befb5
HMAC(secret, time) ecd245c262a70639d5717851af5033261538ecef9d38d461d9f804e81eb4b003
Seed (hex)48656C6C6F21DEADBEEF48656C6C6F21DEADBEEF48656C6C6F21DEADBEEF
Hex length240 bits

Token data

JSON file generation for Entra Graph API Method