QR Code Generator for One-Time Passwords

It implements Time-based One-time Passwords (TOTP) like specified in RFC 6238.

Add to the mod_authn_opt users file on your server:
HOTP/T30 zzz - bda86d19553765fa0d12
Write down your site label for the token:
AVH:zzz@av-huette.de
Write down your secret diceware password:
sedan-dad-tamer-poem-ritzy-gore-shown-woozy-motor-sushi
or write down your secret token:
Entropy > 100 bit. Base32( substr( sha256( diceware-password-without-dashes ), 0, 20 ) )
XWUG2GKVG5S7UDIS


Scan the QR Code
Client-side (Javascript) generated:
otpauth://totp/AVH%3Azzz%40av-huette.de?secret=XWUG2GKVG5S7UDIS&issuer=AVH


updated 20210531