Does TOTP Code upload my file or text to Tool-You servers?

No. TOTP Code runs in this browser tab. Files stay on the device. Limit note: Base32 secret. 30-second steps. HMAC-SHA1. 6 or 8 digits. Not an authenticator app.

Should I use HMAC-SHA256 instead of TOTP Code?

Use TOTP Code when you need RFC 6238 six- or eight-digit code from a Base32 secret. Use HMAC-SHA256 when you need HMAC-SHA256 hex and Base64; optional uppercase. They share a category (Crypto) but not the same job.

TOTP Code

RFC 6238 six- or eight-digit code from a Base32 secret.

Builds a TOTP from a Base32 secret, Unix time, and 6 or 8 digits, 30-second steps, HMAC-SHA1. Unlike UUID this is a time window code. Unlike HMAC-SHA256 the inner hash is SHA-1 per the RFC. Invalid Base32 fails. Not an authenticator app.

What TOTP Code does

This URL is only for TOTP Code (crypto · totp). RFC 6238 six- or eight-digit code from a Base32 secret. Other Crypto tools on Tool-You look similar in the chrome, so the job definition below is the part that belongs to TOTP Code alone: Builds a TOTP from a Base32 secret, Unix time, and 6 or 8 digits, 30-second steps, HMAC-SHA1. Unlike UUID this is a time window code. Unlike HMAC-SHA256 the inner hash is SHA-1 per the RFC. Invalid Base32 fails. Not an authenticator app.

How to use TOTP Code

Keep this tab on TOTP Code (/crypto/totp). Pasting into the wrong Crypto tool (for example HMAC-SHA256) changes the job.
Paste or type the input TOTP Code expects. Path hint: crypto · totp. RFC 6238 six- or eight-digit code from a Base32 secret.
Apply the TOTP Code action only. UUID Generator is a different transform (Generate UUID v4 or v7 in your browser.). Builds a TOTP from a Base32 secret, Unix time, and 6 or 8 digits, 30-second steps, HMAC-SHA1. Unlike UUID this is a time window code. Unlike HMAC-SHA256 the inner hash is SHA-1 per the RFC. Invalid Base32 fails. Not an authenticator app.
Copy the output of TOTP Code if you need it elsewhere. Size/complexity still follows: Base32 secret. 30-second steps. HMAC-SHA1. 6 or 8 digits. Not an authenticator app.
If the text job is actually HMAC-SHA256 hex and Base64; optional uppercase., leave TOTP Code and open HMAC-SHA256.

When not to use TOTP Code

Skip TOTP Code when a neighbor tool matches better — start with HMAC-SHA256 or UUID Generator — or when the description already warns the job will fail. In the tool’s own words: Builds a TOTP from a Base32 secret, Unix time, and 6 or 8 digits, 30-second steps, HMAC-SHA1. Unlike UUID this is a time window code. Unlike HMAC-SHA256 the inner hash is SHA-1 per the RFC. Invalid Base32 fails. Not an authenticator app.

Questions about TOTP Code

What does TOTP Code do that other Crypto pages on this site do not?: Builds a TOTP from a Base32 secret, Unix time, and 6 or 8 digits, 30-second steps, HMAC-SHA1. Unlike UUID this is a time window code. Unlike HMAC-SHA256 the inner hash is SHA-1 per the RFC. Invalid Base32 fails. Not an authenticator app. Short version: RFC 6238 six- or eight-digit code from a Base32 secret.
Does TOTP Code upload my file or text to Tool-You servers?: No. TOTP Code runs in this browser tab. Files stay on the device. Limit note: Base32 secret. 30-second steps. HMAC-SHA1. 6 or 8 digits. Not an authenticator app.
Should I use HMAC-SHA256 instead of TOTP Code?: Use TOTP Code when you need RFC 6238 six- or eight-digit code from a Base32 secret. Use HMAC-SHA256 when you need HMAC-SHA256 hex and Base64; optional uppercase. They share a category (Crypto) but not the same job.
What are the limits of TOTP Code?: Base32 secret. 30-second steps. HMAC-SHA1. 6 or 8 digits. Not an authenticator app. Also: Builds a TOTP from a Base32 secret, Unix time, and 6 or 8 digits, 30-second steps, HMAC-SHA1. Unlike UUID this is a time window code. Unlike HMAC-SHA256 the inner hash is SHA-1 per the RFC. Invalid Base32 fails. Not an authenticator app.