About CodeGate

CodeGate is a web-based utility for generating and viewing current TOTP authentication codes, using authentication information that belongs to you or that you are explicitly authorized to use.

What CodeGate is

CodeGate is a small online tool with one purpose: to show the current time-based one-time password (TOTP) for a secret that you are authorized to use. There are two ways to use it:

• Your own secret key. Paste a TOTP secret key, or an otpauth:// link, into the box on the home page. The code is calculated inside your browser. The key is not sent to our server.
• An account set up for you. Some accounts are set up on this site by its operator, with the secret stored in encrypted form. If one has been set up for you, enter its email address and the tool shows the current code.

The problem it addresses

Authenticator codes normally live inside an app on one phone. People who work with TOTP legitimately, such as developers testing two-step verification, people who keep their own secret keys and want to see the current code on a computer, or people who have been given permission to use a shared account, sometimes need a simple way to see the current code in a web browser. CodeGate offers that and nothing more: it displays a code for information you are authorized to use.

What TOTP authentication is

A TOTP code is a short number, usually six digits, that changes about every 30 seconds. It is calculated from a shared secret and the current time, and many online services ask for it as an additional step after your password. The secret is sensitive, because anyone who has it can generate valid codes. The home page explains this in more detail.

How CodeGate is intended to help

• It calculates the code with the standard TOTP method (RFC 6238), so the result matches what a standard authenticator app would show for the same secret.
• It shows a countdown, renews the code when its time window ends, and follows server time so that a wrong device clock does not cause mistakes.
• It lets you copy the code with one tap.

What CodeGate does not do

CodeGate does not provide passwords, account recovery, or access to any third-party account. It cannot bypass authentication: it can only produce a code from a secret that has been supplied to it, and that secret must be one you are authorized to use.

An independent service

CodeGate is an independent service. Product names, trademarks, and company names mentioned on this website belong to their respective owners. No affiliation, sponsorship, or endorsement is implied unless explicitly stated.

Responsible and authorized use

You may only use CodeGate with accounts and authentication information that you own or are explicitly authorized to use. The Acceptable Use page and the Terms of Service explain what is allowed and what is not.

Advertising on this site

This website contains advertising placements. Advertisements are clearly labelled "Advertisement", are separate from the tool, and are not part of CodeGate's service or endorsed by it. Businesses can buy a placement directly; see Advertise with us. Advertisements are reviewed before they are shown.

Contact

Questions about the service, privacy, or content on this site are welcome. See the Contact Us page.