TOTP Toolset

sha256 version

sha1 version

This toolset can be used to emulate a hardware token (with SHA256 seeds) and as to perform OTP verification and drift detection . The SHA-1 version of this tool is available here

Features

  • emulates tokens with SHA-256 seeds (i.e. C203)
  • converts hex seed to base32 format
  • generates QR image based on hex or base32 seed key values
  • generates random seed values (i.e. for Token2 programmable tokens)
  • can verify the time drift with customizable skew value
  • creates CSV
We have also developed a fully client-side version of Token2 TOTP Toolset (Token2 TOTP Toolset - local), which can be run locally without accessing any libraries/resources on the Internet (including the QR image generation). The full source code of "Token2 TOTP Toolset - local" is available under our GitHub repository.

Seed in base32



QR code

OTP verification & drift detection

⏱ --

skew ±

Seed data

Unix epoch / 30
HMAC(secret, time)
Seed (hex)
Hex length

Token data

CSV generation