TOTP and HOTP codes

Paste a base32 secret or a whole otpauth:// URI to see the codes an authenticator app shows: previous, current and next, with a countdown. Add a code to check it against one step either side, the window most servers accept.

JavaScript is off, so the in-browser engine can't run. Submitting a form sends it to this server instead, where it is processed in memory and neither logged nor stored.

Secret (base32) or otpauth:// URI Spaces, dashes and lower case are fine. A pasted URI brings its own settings. Code to check (optional)

Settings: algorithm, digits, period, HOTP, and the account for the URI

Mode Algorithm Digits (6 to 8) Period, seconds (15 to 300)

Counter (HOTP only) Account (for the URI) Issuer (for the URI)

Using this from the terminal

Every tool here also answers a plain POST with JSON. From a terminal your input goes to this server, unlike on the page, which runs everything in your browser.

curl https://cipher.corpberry.com/totp -d secret=JBSWY3DPEHPK3PXP -d code=123456
  curl https://cipher.corpberry.com/totp --data-urlencode 'secret=otpauth://totp/Example:alice?secret=JBSWY3DPEHPK3PXP&issuer=Example'
  curl https://cipher.corpberry.com/totp -d secret=JBSWY3DPEHPK3PXP -d mode=hotp -d counter=5

POST only. Other fields: algo (SHA1, SHA256, SHA512), digits, period, label, issuer, and now (unix seconds) for the codes at another moment. The API runs on this server, so the secret travels; this page doesn't send it anywhere.

From an AI agent (MCP): https://mcp.corpberry.com/mcp/cipher · setup