Terms of Service

1. Acceptance of terms

By accessing and using TOTP Token Generator, you agree to these Terms of Service. If you do not agree with them, please do not use the service.

2. Description of service

TOTP Token Generator is a browser-based authenticator that generates RFC 6238 time-based one-time passwords (TOTP) from secrets you provide. The software runs in your browser; there is no account and no server-side storage of your tokens. The service is provided free of charge and as-is.

3. Your responsibility for your data

This is the most important section of these terms. Your vault is encrypted with a key derived from your master password.

• If you forget the master password, the vault cannot be decrypted by anyone, including us, and the tokens in it are permanently lost.
• Clearing your browser's site data, or erasing the vault in Settings, deletes the tokens on that device.
• You are responsible for exporting and keeping encrypted backups of tokens you cannot afford to lose.

We strongly recommend keeping a backup in a second location and verifying that it restores before you rely on it.

4. Acceptable use

You agree not to use TOTP Token Generator to process secrets you are not authorised to hold, to attempt to disrupt the service, or to use the service in violation of applicable law. You are solely responsible for the accounts you configure and for complying with the security requirements of the services those accounts belong to.

5. No warranty

The service is provided without warranties of any kind, express or implied, including fitness for a particular purpose. Time-based codes depend on your device clock and on the cryptography implementation of your browser; we do not guarantee that any particular authentication attempt will succeed.

6. Limitation of liability

To the maximum extent permitted by law, TOTP Token Generator and its creators shall not be liable for any direct, indirect, incidental, special, consequential or exemplary damages arising from your use of, or inability to use, the service — including loss of access to accounts due to a lost master password, deleted local data, an unsynchronised system clock, or a compromised browser.

7. Intellectual property

The TOTP algorithm is defined by public standards (RFC 4226 and RFC 6238) and is not owned by us. The site's own code, copy and design remain the property of their respective owners. Your secrets and the tokens you store are yours; we never receive a copy of them and therefore claim no licence over them.

8. Advertising

Parts of this site are supported by advertising served by third parties. Ads are not displayed inside the vault interface. Your interaction with advertisers is governed by their own terms and privacy policies.

9. Changes to these terms

We may update these Terms of Service from time to time. Continued use of TOTP Token Generator after a change constitutes acceptance of the updated terms. The date at the top of this page reflects the current version.

10. Contact

Questions about these terms can be sent to support@totptokengenerator.com.