Workspace

Settings

Appearance, defaults, privacy, and your local vault. Nothing here leaves this browser unless you trigger it.

Appearance

Theme

Eight presets derive from a single OKLCH primitive set. Switching is instant and persists across visits.

Authenticator defaults

Defaults applied when the generator parses a bare Base32 secret with no otpauth metadata.

AlgorithmRFC 6238 specifies SHA-1. Most services still require it.
SHA-1
Digits6 is standard. 8 is supported by a few enterprise services.
6
Period30 seconds matches every mainstream authenticator.
30s

Privacy

Control save-modal behaviour and review our privacy commitments.

Skip "Save to vault" confirmationSuppresses the first-time save modal only. Critical warnings still always appear.

Data and vault

Export an encrypted backup of your local vault or import a previous export.

Export encrypted vault

Encrypts the local vault with a passphrase (PBKDF2-SHA256, 600 000 iterations) and downloads a JSON file.

Import vault

Imports a TOTP Studio encrypted export. Duplicates are merged by id; timestamp collisions are remapped.

Accessibility

Tune motion, contrast, and announcement behaviour.

Reduce motionHonours the browser preference by default. Enable this to force-disable transitions.
Live-region announcementsOnly at meaningful thresholds (15, 10, 5, 4, 3, 2, 1 seconds). Not every second.
Throttled

Account

TOTP Studio runs in guest mode by default. Enable encrypted cloud sync from /sync to use the same vault across devices.

Guest profile · local onlyNo email required. Tokens stay encrypted in this browser.
Quick vault summaryLoading local vault…
Open vault

About

TOTP Studio is a local-first, RFC 6238-compliant authenticator built for calm, private, reliable use.

Danger zone

Erase every token on this device. The action is irreversible.