Comprehensive documentation for the TOTPBOX TOTP authentication platform.
TOTPBOX provides TOTP (Time-based One-Time Password) authentication compliant with RFC 6238 and RFC 4226.
- An active TOTPBOX account (sign up at totpbox.com)
- Your preferred platform: Web or API
- Log in to your dashboard at totpbox.com
- Navigate to Settings > Security > Two-Factor Authentication
- Scan the QR code with any TOTP-compatible authenticator app
- Enter the 6-digit code to confirm and enable 2FA
Note: The TOTPBOX REST API is currently under development and not yet publicly available. This section documents the planned API design. Endpoints will be activated when the API launches. Subscribe to releases or watch this repo to be notified.
https://api.totpbox.com/v1
All API requests will require a Bearer token in the Authorization header.
| Method | Endpoint | Description |
|---|---|---|
POST |
/totp/generate |
Generate a new TOTP secret |
POST |
/totp/verify |
Verify a TOTP token |
GET |
/totp/qr |
Get QR code for secret |
DELETE |
/totp/{id} |
Revoke a TOTP secret |
GET |
/account/status |
Check account/API status |
| Plan | Requests/min |
|---|---|
| Free | 30 |
| Pro | 300 |
| Enterprise | Unlimited |
- Platform infrastructure set up
- Web dashboard (early access)
- TOTP generation and verification — web interface only
- REST API and mobile apps are in development
Q: Which authenticator apps are compatible?
A: Any RFC 6238-compliant authenticator works, including Google Authenticator, Authy, 1Password, Bitwarden, and others.
Q: What hash algorithm does TOTPBOX use?
A: HMAC-SHA1 by default (RFC 4226 standard), with SHA-256 and SHA-512 planned for future releases.
Q: Is there a public API available?
A: The REST API is currently in development. See the API Reference section for planned endpoints.
Q: How do I report a security vulnerability?
A: See SECURITY.md — please do not open a public issue.
- Email: totpbox@gmail.com
- Issues: github.com/TOTPBOX/totpbox/issues
- Website: totpbox.com
- X / Twitter: @totpbox
© 2026 TOTPBOX. See LICENSE for documentation license terms.