100% Execució al navegador · Zero transmissió al servidor · Preparat fora de línia

Eines de diagnòstic i seguretat 2FA / TOTP

Suite de diagnòstic especialitzada per a la resolució d'incidències de 2FA i enginyers de seguretat. Valideu i repareu claus Base32, analitzeu i construïu URIs otpauth:// bidireccionals amb codis QR en temps real i mesureu la desviació del rellotge amb precisió de mil·lisegons.

1

Base32 Key Validator & Cleaner

Detecta caràcters no vàlids (0, 1, 8, 9, O, I, L), elimina espais/guions, afegeix farciment amb '=' i agrupa en blocs estàndard de 4 caràcters

Awaiting Input
| |
Valid Chars 0 Excl. spaces & invalids
Bit Length 0 bit 0 bytes
Padding Status No Pad RFC 4648 8-char align
Security Rating Pending TOTP Compatibility
Majúscules i sense caràcters no vàlids
Entrada manual còmoda a aplicacions mòbils

💡 Proveu immediatament la clau verificada al generador principal amb càlcul instantani de TOTP de 6 dígits.

🚀 One-Click Test in 2FA Generator
2

otpauth:// URI Inspector & Reverse Builder

Edició bidireccional: analitzeu URIs otpauth:// en camps individuals o editeu els camps per generar URIs nets i codis QR en directe

Real-time Bidirectional
| |
Structured Fields (Editing any field immediately updates URI & QR code) Type: TOTP
Test Secret in Generator
Codi QR interactiu per a autenticadors

Scan with Google Authenticator, Microsoft Authenticator, or 1Password to bind instantly

3

NTP System Clock Drift Inspector

Mesura de latència de xarxa múltiple contra un rellotge atòmic de referència. Diagnostica més del 90% dels errors de verificació 2FA.

Local Device Clock
--:--:--
Reading local timezone...
Based on browser Date.now()
Cloud Reference (UTC)
--:--:--
Synchronizing network probe...
Compensated for network half-trip (RTT/2)
Clock Drift Offset RTT: -- ms
Checking...
Sending network probes...
Awaiting Probe
✅

Perfect Clock Sync (Offset < 1s)

Your device system clock is in perfect synchronization with global network standard time. RFC 6238 30-second TOTP tokens will generate and authenticate reliably without window desynchronization.

Guia de calibratge de l'hora del sistema (Solucionar fallades en codis 2FA)

Select your operating system
  1. Press Win + I to open Windows Settings.
  2. Select Time & language from the sidebar, then click Date & time.
  3. Ensure that Set time automatically and Set time zone automatically are both toggled ON.
  4. Under Additional settings, click the Sync now button until a green checkmark appears.
  5. CLI Command (Admin): Run w32tm /resync in PowerShell or CMD.

Frequently Asked Questions (FAQ)

In-depth technical answers on Base32 encoding, otpauth standards, and clock drift mechanics

Q. Why are digits 0, 1, 8, and 9 invalid in Base32?

Under RFC 4648, standard Base32 represents 5 bits of data per character, requiring exactly 32 distinct symbols: uppercase A-Z (26 letters) and digits 2-7 (6 numbers). Digits 0, 1, 8, and 9 simply do not exist in the alphabet. Furthermore, 0 is easily confused with letter O, and 1 is easily confused with I or L. Our auto-fix utility restores accidentally confused characters automatically.

Q. What parameters are included in an otpauth:// URI?

The otpauth:// specification originated with Google Authenticator and has become an RFC-aligned open standard. Key parameters include: secret (Base32 shared key), issuer (provider name, e.g. GitHub or Google), algorithm (HMAC hash function, default SHA1), digits (code length, default 6), and period (time step window, default 30s).

Q. Why does a clock drift of 15 seconds cause token rejection?

TOTP computes dynamic codes strictly via T = Math.floor(UnixTimestamp / 30). While most authentication servers provide a ±1 interval window tolerance, when your local device clock is off by 15-20 seconds, your code enters the adjacent time interval 15 seconds prematurely, triggering frequent validation rejections near interval boundaries.

Q. Does this toolbox collect, store, or transmit my keys?

Never. 2FA-Tool.com operates under a zero-trust, privacy-first commitment. All Base32 parsing, key cleaning, URI reverse building, QR code rendering, and NTP offset measurements happen completely inside your browser's local JavaScript memory. No server uploads, no cookies, and no persistent logs.

Copied to clipboard successfully!