Free TOTP / 2FA QR Code Generator
Build standard otpauth:// QR codes for any TOTP-compatible authenticator app. Pure RFC 6238, no server, no signup.
- Best for
- 2FA enrollment for web apps — works with Google Authenticator, 1Password, Authy, Bitwarden, Apple Passwords.
- Scans on
- Authenticator apps only — phone cameras don't auto-handle otpauth URIs.
- When not to use
- For push-based 2FA (Duo, Okta Verify) — those use proprietary formats.
- Standards
- RFC 6238 TOTP; Google Authenticator otpauth:// URI.
- QR-generator
- Gratis visittkortdesigner
- Utskrivbare WiFi-kort
- Batch CSV (500 koder)
- 40 maler
- 20 språk
Kompatibilitetsforklaring
Dette strekkodeformatet rendres monokromt med bare forgrunns- og bakgrunnsfarger. Maler, prikk-/øyeformer, gradienter, rammer og sentrumslogoer gjelder kun QR-koder og er skjult her.
Vis 30 maler til
Lagre en stil med knappen over for å beholde favorittene dine her.
Eller velg et innebygd ikon:
Vis 108 ikoner til
Rendres bak QR-en med redusert opasitet. Tvinger automatisk EC=H slik at QR-en fortsatt skanner gjennom bildet.
Batchgenerering
Last opp en CSV for å generere opptil 500 QR-koder i én batch. Hver rad blir sin egen QR — velg en mal eller overstyr 21 egenskaper per rad: farger, rammer, prikk/øye/øyeeple-stiler, gradienter, gjennomsiktighet, størrelse, feilkorrigering, format, innebygd logo og mer.
21 kolonner: type, data, filename, frametext, frame, template, fgcolor, bgcolor, size, ec, dotstyle, eyestyle, format, logo, gradient, g2, gtype, gangle, transparent, eyeball, eyecolor. Kun type og data kreves. Bruk | for å skille felt inne i data (f.eks. ssid|password|WPA).
Alle 20 QR-typer støttes, inkludert URL, WiFi, vCard, MeCard, Email, SMS, Event, Location, UPI, SEPA, PayPal, Crypto, Micro QR og rMQR. Last ned eksempel-CSV for å se hver kolonne, alle 40 maler, 11 rammestiler og de 12 innebygde logoene i aksjon.
1. Last ned eksempel-CSV · 2. Rediger med dine data · 3. Last den opp her
Lagre hele QR-en — type, alle feltverdier, stil, ramme, logo, visittkortdesign — som en enkelt .qr.json-fil. Last den inn senere for å gjenskape alt med ett klikk.
Skriv inn innhold for å generere QR-koden din
E-signaturer som holder i retten
Abundera Sign går utover grunnleggende e-signaturer. Hvert dokument får kryptografisk bevis, uavhengig verifisering og en manipulasjonsbestandig bevispakke.
- Automatisk genererte rettsklare bevispakker
- Personlig dokumentsegl — oppdager manipulasjon umiddelbart
- Forankret til 5 uavhengige systemer — ingen enkelt feilpunkt
How TOTP QR Codes Work
TOTP (Time-based One-Time Password) is the open standard behind every modern authenticator app — Google Authenticator, Authy, 1Password, Bitwarden, Microsoft Authenticator, Aegis, FreeOTP, Raivo, and dozens more. When you set up 2FA on a service, the service generates a shared Base32 secret and packages it into an otpauth://totp/... URI. Your authenticator app scans the QR, stores the secret locally, and starts producing 6-digit codes that change every 30 seconds.
This generator builds the URI for you. Useful for self-hosted services that don't ship a QR generator, password manager migration, lab/test environments, and the moment you need to switch authenticator apps without losing your existing seeds.
Fields explained
- Issuer — the service name (e.g. GitHub). Shown as the heading in the authenticator app.
- Account — usually your username or email. Shown as the subheading.
- Secret — the Base32-encoded shared secret. Standard length is 16, 26, or 32 characters.
- Algorithm — SHA1 (default, supported everywhere), SHA256, or SHA512.
- Digits — 6 (default) or 8.
- Period — 30 seconds (default) or 60.
Privacy
The shared secret is the most sensitive thing you'll ever paste into a QR generator. Abundera QR runs entirely in your browser — the secret never touches a server, never gets logged, never leaves your device. If you're security-conscious, generate codes on an offline laptop and you're golden.
Tilgjengelig på 26 språk
Fullt oversatt grensesnitt, native skriftgjengivelse og høyre-til-venstre-støtte for arabisk og urdu.
Frequently Asked Questions
Which authenticator apps work with these QR codes?
Every standards-compliant TOTP app: Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, LastPass Authenticator, Aegis, Raivo, FreeOTP, FreeOTP+, 2FAS, Ente Auth, Yubico Authenticator, KeePassXC, and many more.
Is the secret transmitted to your servers?
No. Abundera QR is a client-side static site. The Base32 secret you paste is encoded into the URI inside your browser and rendered to the canvas locally. We have no servers, no logs, no telemetry — there is nowhere for the secret to go.
What's the difference between SHA1, SHA256, and SHA512?
SHA1 is the default and is supported by every TOTP app on the market. SHA256 and SHA512 are more secure but adoption is uneven — Google Authenticator silently treats them as SHA1, which produces wrong codes. Pick SHA1 unless you control both sides.
Can I use this for HOTP (counter-based) codes too?
Yes — we ship a dedicated HOTP generator alongside this one. Use HOTP for hardware tokens (YubiKey OTP slot) or systems without reliable clocks. The URI scheme is the same; the counter parameter replaces the time period.
How do I get the Base32 secret from my service?
When the service displays its setup QR code, there's almost always a 'Can't scan? Enter manually' link. The text shown there is the Base32 secret. Copy it into Abundera QR to regenerate the QR for a different app.
Can I store multiple TOTP entries in one QR?
No — each otpauth:// URI is a single account. To migrate many accounts at once, use Google Authenticator's export/migration QR feature, which uses a different URI scheme (otpauth-migration://).
Does the QR work if I scan it twice from different apps?
Yes. The QR contains the seed, not a token. Scanning the same QR into two apps gives you two synchronized authenticators. Useful for backup.