2FAuth
The facts below are what the maker publishes about 2FAuth, checked and dated. Our editors have not written about it yet.
The facts
Each one read from 2FAuth's own pages, with the date it was checked.
What it does
- Account setup
- Users can add accounts by scanning QR codes or entering details manually, and organize them into groups.checked 12 Oct 2026
- Adding accounts
- Accounts can be added by scanning a QR code or entering details manually.checked 12 Oct 2026
- API
- The REST API follows OpenAPI 3.1 and uses personal access tokens with Bearer authentication.checked 12 Oct 2026
- Authentication
- The app supports password and WebAuthn login, OpenID and GitHub SSO, and authentication through a reverse proxy.checked 12 Oct 2026
- Authentication integrations
- Documented sign-in options include OpenID and GitHub SSO, WebAuthn passkeys, and authentication through a reverse proxy.checked 12 Oct 2026
- Code type
- totp and hotpchecked 21 Sep 2026
- Code types
- It generates TOTP, HOTP and Steam Guard codes.checked 12 Oct 2026
- Demo
- A demo is available and resets every hour.checked 12 Oct 2026
- Deployment
- The documentation provides self-hosted installation guidance for NGINX or Apache2 and a Docker installation option.checked 12 Oct 2026
- Encryption
- Database encryption for stored 2FA secrets is optional and disabled by default; the APP_KEY is needed to decrypt data.checked 12 Oct 2026
- Imports
- It supports importing 2FAuth JSON, Google Auth QR codes, Aegis JSON or plain text, and 2FAS JSON.checked 12 Oct 2026
- Installation
- The project documents self-hosted server, Docker, Heroku and YunoHost installation options.checked 12 Oct 2026
- Intended users
- The maker describes 2FAuth as intended for individuals and teams, including personal, company and family account management.checked 12 Oct 2026
- License
- The project’s GitHub repository identifies its license as AGPL-3.0.checked 12 Oct 2026
- Migration
- The docs describe imports from Google Authenticator QR codes, 2FAS files, and Aegis exports, while noting that not every authenticator app supports export.checked 12 Oct 2026
- Organization
- Users can organize accounts with groups, icons, filtering, and search.checked 12 Oct 2026
- OTP types
- It generates TOTP, HOTP, and Steam Guard codes.checked 12 Oct 2026
- Product
- 2FAuth is a self-hosted web app for storing, organizing and generating two-factor authentication codes.checked 12 Oct 2026
- Purpose
- 2FAuth is a self-hosted web app for storing, organizing, and generating two-factor authentication codes.checked 12 Oct 2026
- Security
- Administrators can enable encryption for sensitive database data, and users can configure automatic logout and hide generated codes.checked 12 Oct 2026
- Security standards
- The project says its OTP generation follows RFC 4226 for HOTP and RFC 6238 for TOTP.checked 12 Oct 2026
- Sharing
- Users can share accounts so recipients can identify them and generate codes, but recipients cannot view or export the underlying secret.checked 12 Oct 2026
Where it runs
- Browser extension
- The browser extension can capture 2FA secrets and retrieve codes, but requires a running 2FAuth instance.checked 12 Oct 2026
- Browser extensions
- Browser extensions can capture and register secrets or retrieve OTPs, and require a running 2FAuth instance.checked 12 Oct 2026
Alternatives to 2FAuth
- 1
Bitwarden
Free planOpen sourceAndroidiOSWebAPI9.3From $1.65 a month - 2
Duo Mobile
Free planAndroidiOS8.5From $3 a month - 3
SAASPASS Authenticator
Free planAndroidiOSWebExtension8.4From $1 a year - 4
LastPass
Free planAndroidiOSWebExtension8.4Free plan - 5
Yubico Authenticator
Free planAndroidiOSLinuxmacOS8.1Free plan - 6
HYPR Authenticate
AndroidiOSWebAPI8.1From $3 a month