What is a TOTP secret?
Understand the shared Base32 key behind time-based authentication codes.
A TOTP secret is a shared random key held by both your authenticator and the service you protect. It is commonly displayed as Base32 text or embedded in a QR code.
How a code is produced
The authenticator combines the secret with a time counter, normally changing every 30 seconds. Both sides independently calculate the same short code.
Why the secret matters
Anyone who obtains it can generate future codes. Store recovery material securely and never publish a real secret in screenshots or support requests.