This tool generates simulated 6-digit time-based verification codes to help developers, designers, and testers evaluate two-factor authentication (2FA) user interfaces. Rather than pulling cryptographically valid RFC 6238 tokens from a live Base32 secret seed, the component simulates code rotation every 30-second epoch using local browser JavaScript. This lets you rapidly verify digit grouping, input focus auto-advance, countdown timers, and expired token error states in mock login flows.

### How the Simulation Works

- **Epoch Timing:** The code recalculates against the standard 30-second time step (`Date.now() / 1000 / 30`) mirroring RFC 6238 time windows. - **Mock Code Generation:** Instead of computing HMAC-SHA1 hashes over shared private secrets, it produces a simulated 6-digit numeric token (`Math.floor(Math.random() * 900000 + 100000)`). - **Testing UI States:** Use the generated codes to verify form submission triggers, clipboard paste handlers, and expired code notifications without risking real credentials.

### Worked UI Testing Example

When testing a staged login verification dialog: 1. Open your staged login form requiring a 6-digit confirmation pin. 2. Click "Generate" to produce a sample code like 482910. 3. Paste the code into your test harness to confirm input masking, paste auto-splitting across individual boxes, and reset behavior on token expiry.

### Honest Processing & Security Note

This utility is strictly a frontend UI prototype simulator. It runs entirely inside your browser using client-side JavaScript with zero network calls. Because it generates simulated values and does not execute HMAC-SHA1 cryptographic signing over Base32 secrets, do not use these tokens for production account authentication or security-critical 2FA setups.