Enter Your Information
Enter your own TOTP secret key in the field above.
Generate Your
TOTP Authentication Code
Generate a current time-based code from a TOTP secret key you are authorized to use.
Get Your Current Code
Request the current TOTP code using information you are authorized to use. It renews itself as its time window ends.
Use Your Code
Copy the displayed code and use it with the account or service you are authorized to access.
What is CodeGate?
CodeGate is a web-based utility designed to help users retrieve or generate current TOTP authentication codes using information they are authorized to use.
Time-based One-Time Password (TOTP) codes are temporary authentication codes commonly used as an additional security factor when signing in to online services.
CodeGate is intended for legitimate authentication workflows and should only be used with accounts and authentication information that you own or are explicitly authorized to use. Read more about CodeGate.
What is TOTP?
TOTP stands for Time-based One-Time Password. It is a short numeric code, usually six digits, that an authenticator calculates from two ingredients: a shared secret and the current time.
Because the time is part of the calculation, the code changes regularly (often every 30 seconds) and an older code stops working. Many online services ask for the current code after your password, as an additional authentication factor.
The shared secret, often shown as a QR code or a text key when two-step verification is set up, is sensitive authentication information. Anyone who has it can produce valid codes, so keep it private, store it safely, and do not share it with people or services you do not trust.
Encrypted at restAny secret key we store is encrypted with AES-256 and is not shown to visitors.
Your own key stays in your browserA secret key you paste is used in your browser only. It is not sent to or stored on our server.
Time-synchronisedThe countdown follows server time, even if your device clock is off.
Security & Responsible Use
TOTP secrets are sensitive authentication information. Keep your authentication credentials private and do not share them with people or services you do not trust.
Only use CodeGate with accounts, credentials, and authentication information that you own or are explicitly authorized to use.
CodeGate does not provide passwords, account recovery, or unauthorized access to third-party accounts. See the Acceptable Use page.
Your Privacy
CodeGate is designed to process information submitted by users for the purpose of providing its services. Please review our Privacy Policy for detailed information about what information may be collected, how it may be used, and how it may be retained.
A secret key that you paste yourself is calculated in your browser and is not sent to or stored on our server. Some limited technical records are kept for security and operation, as explained in the Privacy Policy.
Frequently Asked Questions
What is a TOTP code?
A TOTP (Time-based One-Time Password) is a temporary authentication code generated using a shared secret and the current time. It is commonly used as an additional authentication factor.
How do I get a TOTP code on CodeGate?
Enter the authentication information that belongs to you or that you are authorized to use, then request the current code. You can paste your own TOTP secret key or an otpauth link.
Can I use someone else's TOTP secret?
No. You should only use authentication credentials and TOTP secrets that belong to you or that you are explicitly authorized to use.
Does CodeGate give me access to an account?
No. CodeGate does not provide passwords, account recovery, or unauthorized access to accounts. It is intended to assist with legitimate TOTP authentication workflows.
Why does my TOTP code not work?
TOTP codes are time-sensitive. Make sure you enter the code before it expires and verify that the underlying TOTP information and account settings are correct.
Does CodeGate work with every service?
Compatibility may vary depending on the service and the information available. CodeGate does not guarantee compatibility with every third-party service.
Is CodeGate affiliated with Google, Microsoft, Apple, or other services?
CodeGate is an independent service and is not affiliated with or endorsed by third-party companies unless explicitly stated.
Can I use CodeGate for unauthorized access?
No. CodeGate must only be used with accounts and authentication information that you own or are authorized to use.
Does CodeGate store my information?
It depends on how you use it. A secret key that you paste yourself is used in your browser to calculate the code and is not sent to or stored on our server. Limited technical records are kept for security. Please read our Privacy Policy for the full details.
Is my own secret key sent to your server?
No. When you paste your own secret key or otpauth link, the code is calculated inside your browser and the key is not uploaded. Only an anonymous counter, with no key, code or identifier, is recorded.
How CodeGate Works
- You provide a TOTP secret key (or an otpauth link) that you are authorized to use.
- CodeGate processes it according to what you entered. The secret key is used only inside your browser to calculate the code and is not sent to our server.
- When the information is valid and supported, the current TOTP code is displayed together with a countdown.
- You can copy the code and use it in the authentication process you are authorized to complete.
TOTP codes are time-sensitive and may expire shortly after they are generated.