Sign inCreate account
Sign inCreate account

2FAuth

From public sources

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

ApplicationCategory: Web Apps · Files & cloud storageOpen sourcedata checked Oct 15, 2026
Add to compareAdd to collection

Overview

  • 2fa
  • 2factor
  • hotp
  • otp
  • qrcode
  • self-hosted
  • totp
  • two-factor
  • two-factor-authentication
  • webapp

Installation

Commands are shown, never run by the marketplace. Check them against the official documentation.
  • Official websiteFrom public sourcesfrom catalog metadata
    docs.2fauth.app/ ↗
  • Build from sourceFrom public sourcesfrom catalog metadata

    Build from source: no validated build recipe — follow the repository instructions.

    github.com/Bubka/2FAuth ↗

Compatibility

Unknown means no evidence was found — not that the product is incompatible.
PlatformStatusArchitectureEvidenceConfidence
Web browserUnknown———
Server / self-hostedUnknown———
Container (OCI)Unknown———

Releases

checked Oct 29, 2026
v9.0.0LatestOct 27, 2026Official source ↗

Files in 9.0.0

This release has no attached files.

Release history

Quality profile

algorithm quality-v1.0 · assessed Oct 15, 2026
Quality Score89
Risk Score0
Confidence 1.00
Quality Score and Risk Score are different measures. A high score does not guarantee safety.

Score components

Maintenance · 2020
last activity 4 days ago
Documentation · 1515
README 4928 chars, description present
Ready to use · 156
install instructions: no; releases: yes
Metadata · 1010
4/4 of description, homepage, license, topics
Releases · 1010
10 release(s), latest 43 days ago
Category confidence · 109
classifier confidence 0.9
Adoption · 109
4180 stars (log-dampened, 10k = max)
License clarity · 55
SPDX AGPL-3.0
Community · 55
issues enabled, 303 forks

License

AGPL-3.0
Known licensefrom the repository host

This is the catalog policy status, not legal advice.

Sources

github.com/Bubka/2FAuthPrimary★ 4,180 starslast activity Oct 12, 2026Primary repository · Confidence 1.00

Reviews

Sign in to write a review

No reviews yet.

Alternatives

poznoteSimilar
Powerful note-taking without the hassle.MIT · Web Apps
MeeloSimilar
Self-hosted Music Server. Focused on metadata integration & UIGPL-3.0 · Web Apps
BastillionSimilar
Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.Web Apps
ServasSimilar
A self-hosted bookmark management tool.GPL-3.0 · Web Apps
your_spotifySimilar
Self hosted Spotify tracking dashboardGPL-3.0 · Web Apps
edinoteSimilar
Note taking web application for self-hosting. Offers tagging & Markdown support; can be used as a simple alternative to Evernote.Web Apps

README

From Bubka/2FAuth · license AGPL-3.0 · fetched Oct 29, 2026

2FAuth

[Docker build status] [https://codecov.io/gh/Bubka/2FAuth] [https://github.com/Bubka/2FAuth/blob/master/LICENSE]

A web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

[screens]

2FAuth Demo
Credentials (login - password) : demo@2fauth.app - demo

Purpose

2FAuth is a web based self-hosted alternative to One Time Passcode (OTP) generators like Google Authenticator, designed for both mobile and desktop.

It aims to ease you perform your 2FA authentication steps whatever the device you handle, with a clean and suitable interface.

I created it because :

  • Most of the UIs for this kind of apps show tokens for all accounts in the same time with stressful countdowns (in my opinion)
  • I wanted my 2FA accounts to be stored in a standalone database I can easily backup and restore (did you already encountered a smartphone loss with all your 2FA accounts in Google Auth? I did...)
  • I hate taking out my smartphone to get an OTP when I use a desktop computer
  • I love coding and I love self-hosted solutions

Main features

  • Manage your 2FA accounts and organize them using Groups
  • Scan and decode any QR code to add account in no time
  • Add custom account without QR code thanks to an advanced form
  • Edit accounts, even the imported ones
  • Generate TOTP and HOTP security codes and Steam Guard codes

2FAuth is currently fully localized in English and French. See Contributing if you want to help on adding more languages.

Security

2FAuth provides several security mechanisms to protect your 2FA data as best as possible.

Multi-user app

You have to create a user account and authenticate yourself to use the app. Since version 4.0, you have the ability to allow multiple user accounts for different people. You can allow public registration, limit registration by email domain name, or turn registration off alltogether. You can also limit registration to SSO only.

Modern authentication

You can sign in 2FAuth using a security key like a Yubikey or a Titan key and disable the traditional login form.

Data encryption

Sensitive data stored in the database can be encrypted to protect them against db compromise. Encryption is provided as an option which is disabled by default. It is strongly recommended to backup the APP_KEY value of your .env file (or the whole file) when encryption is On.

Auto logout

2FAuth automatically log you out after an inactivity period to prevent long life session. The auto logout can be deactivated or triggered when a security code is copied.

RFC compliance

2FAuth generates OTP according to RFC 4226 (HOTP Algorithm) and RFC 6238 (TOTP Algorithm) thanks to Spomky-Labs/OTPHP php library.

Requirements

Installation guides

Upgrading

Migration

2FAuth supports importing from the following formats: 2FAuth (JSON), Google Auth (QR code), Aegis Auth (JSON, plain text), 2FAS Auth (JSON)

Contributing

You can contribute to 2FAuth in many ways:

License

AGPL-3.0

Open the repository ↗