Can we use Bcript.hash() to generate secret?

[jprumekso]

I use the user's hashed password generated by Bcript.hash(password, 10) as totp secret. The thing is totp.check() isn't guaranteed to return true even if the token is right. Is that Bcrypt hashed secret the reason?

[yeojz]

Secrets are primarily expected to be base32 encoded.
Using v13, you can choose not to do so and pass it as a Unit8Array.