QR Code Generator for One-Time Passwords

It implements Time-based One-time Passwords (TOTP) like specified in RFC 6238.

Add to the mod_authn_opt users file on your server:
HOTP/T30 zzz - 31713d7bdf9300a250c5
Write down your site label for the token:
AVH:zzz@av-huette.de
Write down your secret diceware password:
crisp.turf.onion.sleep.tug.shore.hunk.aging.dock.delay
or write down your secret token:
Entropy > 100 bit. Base32( substr( sha256( diceware-password-without-dashes ), 0, 20 ) )
GFYT2667SMAKEUGF
Url to re-generate:https://av-huette.de/otpgen/zzz&label=AVH:zzz@av-huette.de&pw=crisp.turf.onion.sleep.tug.shore.hunk.aging.dock.delay


Scan the QR Code
Client-side (Javascript) generated:
otpauth://totp/AVH%3Azzz%40av-huette.de?secret=GFYT2667SMAKEUGF&issuer=AVH


updated 20210531