MailSlurp logo

Virtual authenticators for TOTP testing | MailSlurp

Generate time-based one-time passwords using programmable MFA test devices.

Virtual authenticators for TOTP testing | MailSlurp

Trusted by top companies worldwide

  • Broadcom
  • Scraper
  • Trivago
  • Avast
  • Wolt
  • Panasonic

Product features

TOTP and authenticator capabilities for MFA testing

Use programmable authenticators to cover QR setup, secret capture, rolling code generation, and MFA assertions in CI.

Create programmable TOTP devices on demand

Provision virtual authenticator devices per test user, suite, or environment instead of relying on shared hardware phones.

Explore

Enroll from QR codes or otpauth URIs

Capture MFA setup data from the real enrollment screen and attach it to a test device in the same workflow.

Explore

Generate live time-based codes in tests

Produce valid rolling TOTP codes during browser, API, and CI runs so MFA assertions use the same timing model as production.

Explore

Cover Okta, Auth0, Azure AD, and custom MFA flows

Use the same device model for identity-provider onboarding, recovery, step-up auth, and enterprise MFA regression testing.

Explore

Key workflows

Move from evaluation into a concrete MailSlurp workflow, then expand once the first path is running cleanly.

Programmable TOTP APIs

Configure and control authenticator devices on demand and assign them to test users during automated QA. Test MFA and 2FA authentication with real OTP codes.

MailSlurp product screenshot

Automate multi-factor authentication

Turn QR codes and TOTP Secrets into controllable MFA devices you generate time based codes with. Connect them to tests, automations, and CI/CD to verify compliance and security.

MailSlurp product screenshot

Works everywhere

Control TOTP MFA devices in Selenium, Cypress, Playwright, Postman and more - or use hosted no-code dashboards.

MailSlurp product screenshot

Developer integration

Drop message assertions into Playwright, Cypress, Selenium, or CI

Use SDK helpers inside your existing test runners instead of building mailbox polling and parsing from scratch.

  • Wait for matching email or SMS in test code
  • Extract links, codes, and headers for assertions
  • Run the same patterns locally and in CI

Use virtual TOTP devices today

Use virtual TOTP devices today

Test MFA compliance end-to-end.