The latest articles on DEV Community by Mitch Harhay (@meharhay). https://dev.to/meharhay https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3718556%2F62328604-e5aa-4992-8439-ec8094f6c577.png https://dev.to/meharhay en Mitch Harhay Mon, 19 Jan 2026 01:11:50 +0000 https://dev.to/meharhay/testing-mfa-without-constantly-reaching-for-your-phone-11ij https://dev.to/meharhay/testing-mfa-without-constantly-reaching-for-your-phone-11ij <p>When I’m working on authentication features, testing MFA almost always breaks flow.</p> <p>Unlock phone. Open authenticator. Scroll through test accounts. Race the 30-second timer.</p> <p>It’s not hard — just repetitive and a waste of time.</p> <p>I ended up building a small web-based TOTP tool that I keep open in a browser tab while working. It’s intentionally scoped for testing MFA flows only — not production or real accounts. When I’m done, I can bulk delete everything and move on.</p> <p>I’m curious how other people handle MFA during development. Do you test it end-to-end, disable it locally, or have internal tooling for this?</p> <p>Would love to hear what’s worked (or not) for you.</p> <p>Note: This tool is meant for development and testing workflows only. Please don’t use it to help Grandma when she calls asking for her TOTP codes.</p> <p>If you’re curious, the tool is here: <a href="https://totplab.com" rel="noopener noreferrer">totplab.com</a></p> webdev programming authentication devtools