What information is in an OTP QR code?

The QR code contains an otpauth:// URI with the shared secret, issuer, account label, algorithm, digits, and period — everything an authenticator app needs.

Can I use this to transfer 2FA to a new phone?

If you decode the QR code and save the secret, you can re-create the entry. However, many services provide migration tools. Always keep backup codes safe.

OTP QR Code Decoder

Decode OTP QR codes or paste otpauth:// URIs to inspect their parameters. Nothing leaves your browser.

Privacy: All calculations run entirely in your browser. No data is sent to any server.

Drop a QR code image here or click to upload

or paste URI

What is an OTP QR Code?

When you set up two-factor authentication, apps display a QR code containing an otpauth:// URI. This URI includes the secret key, issuer, algorithm, and other TOTP parameters. This tool decodes that QR code so you can inspect and verify the parameters — useful for debugging 2FA setup flows.

otpauth:// URI Format

The format is: otpauth://TYPE/LABEL?PARAMETERS. TYPE is usually "totp". LABEL is "Issuer:Account". Parameters include: secret (Base32-encoded key), issuer (service name), algorithm (SHA1/SHA256/SHA512), digits (usually 6), period (usually 30).

// Full otpauth URI example
otpauth://totp/GitHub:[email protected]
  ?secret=JBSWY3DPEHPK3PXP
  &issuer=GitHub
  &algorithm=SHA1
  &digits=6
  &period=30

Frequently Asked Questions

What information is in an OTP QR code?: The QR code contains an otpauth:// URI with the shared secret, issuer name, account label, hash algorithm, number of digits, and time period. This is everything an authenticator app needs to generate correct TOTP codes.
Can I use this to transfer my 2FA to a new phone?: If you decode the QR code and save the secret, you can re-create the authenticator entry. However, many services provide migration tools or backup codes. Always keep backup codes in a safe place.

Related Tools

Base64 Encode/Decode

Encode text to Base64 or decode Base64 to text instantly.

JWT Decoder

Decode and inspect JSON Web Tokens without sending them to a server.

Hash Generator

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from text.

TOTP Code Generator

Generate time-based one-time passwords from a secret key for debugging 2FA flows.