HOTP Code
Counter-based one-time password.
RFC 4226 HOTP from a Base32 secret and counter. Unlike TOTP this is not a 30-second clock. Unlike HMAC-SHA1 this prints digits, not a hex MAC. Bad Base32 fails.
What HOTP Code does
RFC 4226 HOTP from a Base32 secret and counter. Unlike TOTP this is not a 30-second clock. Unlike HMAC-SHA1 this prints digits, not a hex MAC. Bad Base32 fails.
This URL is only for HOTP Code (crypto · hotp). Counter-based one-time password. Other Crypto tools on Tool-You look similar in the chrome, so the job definition below is the part that belongs to HOTP Code alone: RFC 4226 HOTP from a Base32 secret and counter. Unlike TOTP this is not a 30-second clock. Unlike HMAC-SHA1 this prints digits, not a hex MAC. Bad Base32 fails.
How to use HOTP Code
- Keep this tab on HOTP Code (/crypto/hotp). Pasting into the wrong Crypto tool (for example TOTP Code) changes the job.
- Paste or type the input HOTP Code expects. Path hint: crypto · hotp. Counter-based one-time password.
- Apply the HOTP Code action only. HMAC-SHA1 is a different transform (HMAC-SHA1 hex and Base64; optional uppercase.). RFC 4226 HOTP from a Base32 secret and counter. Unlike TOTP this is not a 30-second clock. Unlike HMAC-SHA1 this prints digits, not a hex MAC. Bad Base32 fails.
- Copy the output of HOTP Code if you need it elsewhere. Size/complexity still follows: Base32 secret plus counter. 6–8 digits. Not a 30-second clock.
- If the text job is actually RFC 6238 six- or eight-digit code from a Base32 secret., leave HOTP Code and open TOTP Code.
When not to use HOTP Code
Skip HOTP Code when a neighbor tool matches better — start with TOTP Code or HMAC-SHA1 — or when the description already warns the job will fail. In the tool’s own words: RFC 4226 HOTP from a Base32 secret and counter. Unlike TOTP this is not a 30-second clock. Unlike HMAC-SHA1 this prints digits, not a hex MAC. Bad Base32 fails.
Questions about HOTP Code
- What does HOTP Code do that other Crypto pages on this site do not?
- RFC 4226 HOTP from a Base32 secret and counter. Unlike TOTP this is not a 30-second clock. Unlike HMAC-SHA1 this prints digits, not a hex MAC. Bad Base32 fails. Short version: Counter-based one-time password.
- Does HOTP Code upload my file or text to Tool-You servers?
- No. HOTP Code runs in this browser tab. Files stay on the device. Limit note: Base32 secret plus counter. 6–8 digits. Not a 30-second clock.
- Should I use TOTP Code instead of HOTP Code?
- Use HOTP Code when you need Counter-based one-time password. Use TOTP Code when you need RFC 6238 six- or eight-digit code from a Base32 secret. They share a category (Crypto) but not the same job.
- What are the limits of HOTP Code?
- Base32 secret plus counter. 6–8 digits. Not a 30-second clock. Also: RFC 4226 HOTP from a Base32 secret and counter. Unlike TOTP this is not a 30-second clock. Unlike HMAC-SHA1 this prints digits, not a hex MAC. Bad Base32 fails.