Google Authenticator solved a real problem: static passwords are not enough, and typing a six-digit code from your phone closes most of the gap. The catch is that it lives behind an install, and sometimes you just need a code on whatever screen is in front of you, right now. We built Rolling Key to cover that gap: a free TOTP generator that runs entirely in this page, with the same math behind it, no app store required.
Try Rolling Key now
A sample account is already loaded so you see a live, rotating code the instant the page opens. Add your own by pasting a base32 secret key.
How to use it
Paste the base32 secret key a site gives you during 2FA setup (the string behind “can’t scan the QR code?”), give it a label, and Rolling Key starts generating a fresh six-digit code every 30 seconds, exactly like Google Authenticator. Tap any code to copy it straight to your clipboard, watch the ring around it for how much time is left, and delete an account with one tap when you no longer need it. Everything is computed with the standard TOTP algorithm (RFC 6238) using your browser’s built-in cryptography, so the codes are real and will work anywhere that accepts standard 2FA. Your accounts are saved on your device between visits, and nothing you enter is ever sent anywhere.
How it compares to Google Authenticator
Be clear-eyed about what you are trading here. Google Authenticator stores your accounts in an app built for exactly this job, with optional encrypted cloud sync so a lost phone does not mean lost accounts. Rolling Key keeps everything in your browser’s local storage instead. That is genuinely private (nothing leaves your device, ever) but it is also fragile in a specific way: clear your browser’s site data, use a private window, or switch devices, and your saved accounts are gone for good. There is no recovery and no sync.
That makes Rolling Key a good fit for a narrow, real use case: you need a code on a shared or borrowed computer, you want to test a 2FA setup before committing to an app, or you keep one low-stakes account here as a convenience. It is a poor fit as your only backup for anything that actually matters, your email, your bank, your password manager’s own 2FA. For those, install Google Authenticator or another dedicated app, or better yet, a password manager with built-in TOTP support, so your codes survive a lost or wiped phone.
Get the full app
Google Authenticator is free on Android and iOS and works with virtually every site and service that supports two-factor authentication.
If Google Authenticator itself is not the right fit, we compared seven alternatives in our Google Authenticator alternatives roundup, and a separate set in our Authenticator App - 2FA Auth alternatives roundup, covering open-source and hardware-backed options for anyone who wants a permanent home for their 2FA codes.
Frequently asked questions
Is this the real Google Authenticator?
No. Rolling Key is an original tool we built, inspired by the standard TOTP algorithm that Google Authenticator (and every other 2FA app) uses. It is not affiliated with, endorsed by, or connected to Google in any way. If you want the official app with encrypted cloud backup, get it from the stores above.
Where is my secret key stored? Is it secure?
Entirely on your own device, in your browser’s local storage. Rolling Key makes no network requests once the page has loaded, so your secret keys are never transmitted anywhere, not to us, not to anyone. The tradeoff is that this storage is not synced or backed up: clearing your browser’s site data, using a private window, or switching devices will permanently delete any accounts you have added.
Can I generate real 2FA codes in a browser?
Yes. TOTP is just a calculation involving a shared secret and the current time, defined in RFC 6238. Rolling Key implements that calculation using your browser’s built-in cryptography, so the six-digit codes it produces are functionally identical to what Google Authenticator or any other compliant app would generate from the same secret.
Does it work offline?
Yes, once the page has loaded. Code generation only needs an accurate clock and the secret key, both of which are already on your device. No internet connection is required to generate codes.
Is it free?
Yes, with no signup, no account, and no limit on how many codes you generate or accounts you add.
