2FA / TOTP -tietoturva- ja diagnostiikkatyökalut
A dedicated diagnostic suite built for 2FA troubleshooting and security engineers. Validate & repair Base32 secrets, parse and build bidirectional otpauth:// URIs with live QR codes, and measure device clock drift with millisecond accuracy.
Base32-avainten validaattori ja puhdistaja
Tunnistaa virheelliset merkit (0, 1, 8, 9, O, I, L), poistaa välilyönnit/yhdysmerkit, lisää '='-täytteen ja ryhmittelee 4 merkin lohkoihin
Havaittu virheellisiä merkkejä
💡 Test verified key immediately in the main generator with instant 6-digit TOTP calculation.
🚀 One-Click Test in 2FA Generatorotpauth:// URI Inspector & Reverse Builder
Bidirectional editing: Parse raw otpauth:// URIs into fields, or edit fields to generate clean URIs and live QR codes
Scan with Google Authenticator, Microsoft Authenticator, or 1Password to bind instantly
NTP System Clock Drift Inspector
Multi-sample network round-trip measurement against reference time. Diagnoses 90%+ of 2FA verification errors.
Perfect Clock Sync (Offset < 1s)
Your device system clock is in perfect synchronization with global network standard time. RFC 6238 30-second TOTP tokens will generate and authenticate reliably without window desynchronization.
Järjestelmän aika Calibration Guide (Fix 2FA Code Failures)
Select your operating system- Press Win + I to open Windows Settings.
- Select Time & language from the sidebar, then click Date & time.
- Ensure that Set time automatically and Set time zone automatically are both toggled ON.
- Under Additional settings, click the Sync now button until a green checkmark appears.
- CLI Command (Admin): Run
w32tm /resyncin PowerShell or CMD.
- Click the Apple menu in the top-left corner and open System Settings.
- Navigate to General in the sidebar, then click Date & Time.
- Ensure Set time and date automatically is enabled.
- Keep the default reference server set to
time.apple.com. - Terminal Command: Open Terminal and run
sudo sntp -sS time.apple.com.
- Open the Settings app on your iPhone or iPad.
- Tap General, then select Date & Time.
- Ensure Set Automatically is toggled ON.
- 💡 Pro Tip: If it was already on but drift persists, toggle it OFF for 5 sekuntia, then toggle it ON again to force an immediate base station re-sync.
- Open your phone's Settings and tap System > Date & time.
- Enable Use network-provided time and Use network-provided time zone.
- ⭐ Google Authenticator built-in sync: Open Google Authenticator > Tap the 3 dots menu > Settings > Time correction for codes > Tap Sync now.
Usein kysytyt kysymykset (UKK)
Perusteelliset tekniset vastaukset Base32-koodauksesta, otpauth-standardeista ja kellopoikkeaman mekaniikasta
Q. Miksi numerot 0, 1, 8 ja 9 ovat virheellisiä Base32:ssa?
Under RFC 4648, standard Base32 represents 5 bits of data per character, requiring exactly 32 distinct symbols: uppercase A-Z (26 letters) and digits 2-7 (6 numbers). Numerot 0, 1, 8, and 9 simply do not exist in the alphabet. Furthermore, 0 is easily confused with letter O, and 1 is easily confused with I or L. Our auto-fix utility restores accidentally confused characters automatically.
Q. Mitä parametreja otpauth://-URI sisältää?
The otpauth:// specification originated with Google Authenticator and has become an RFC-aligned open standard. Key parameters include: secret (Base32 shared key), issuer (provider name, e.g. GitHub or Google), algorithm (HMAC hash function, default SHA1), digits (code length, default 6), and period (time step window, default 30s).
Q. Why does a clock drift of 15 sekuntia cause token rejection?
TOTP computes dynamic codes strictly via T = Math.floor(UnixTimestamp / 30). While most authentication servers provide a ±1 interval window tolerance, when your local device clock is off by 15-20 sekuntia, your code enters the adjacent time interval 15 sekuntia prematurely, triggering frequent validation rejections near interval boundaries.
Q. Kerääkö, tallentaako tai välittääkö tämä työkalupakki avaimiani?
Ei koskaan. 2FA-Tool.com toimii täyden luottamuksettomuuden ja yksityisyyden periaatteella. Kaikki Base32-jäsennys, avainten puhdistus, URI-koodaus, QR-koodien luonti ja NTP-mittaukset tapahtuvat täysin selaimesi paikallisessa JavaScript-muistissa. Ei palvelinlatauksia, ei evästeitä eikä pysyviä lokeja.