Logo
Deploy Now

SaaS Alternative

1Password

Categories

Self-Hosted Privacy Security Authentication Password Management Two-Factor

Stars

4,125

Forks

297

Watchers

25

Developer links

Last Updated: 08-24-2026 10:24 AM (UTC)

2FAuth

2FAuth generates TOTP, HOTP, and Steam Guard codes from any web browser, freeing your two-factor authentication from dependence on a single smartphone or app. Lose your phone, switch devices, or sit at a desktop computer, and your 2FA codes remain accessible through the web interface. The Laravel and Vue.js application stores account secrets in an encrypted SQLite database that backs up as a single file. Adding accounts works through camera-based QR scanning or manual secret key entry for services that only provide text codes. Group organization with drag-and-drop sorting keeps large collections navigable, categorized however you prefer. WebAuthn authentication with FIDO2 hardware keys protects vault access with phishing-resistant passwordless login, meaning the tool that secures your accounts is itself secured by the strongest available method. Automatic screen lock triggers after configurable idle time, and OTP obfuscation dots out generated codes until you tap to reveal them, preventing shoulder surfing in shared spaces. The REST API enables browser extensions and external applications to request codes programmatically. Import compatibility with Google Authenticator, Aegis, and 2FAS ensures painless migration without re-enrolling every account from scratch. PWA installation places 2FAuth on your device home screen for native-app-like instant access. Runs on a dedicated RepoCloud VPS with guaranteed resources and full root SSH access. AGPL-3.0 licensed.

2FAuth
2FAuth
2FAuth

Benefits

  • Device-Independent 2FA Access
  • Access all your security codes from any browser on any device — computer, tablet, or borrowed phone — without depending on a specific smartphone or authenticator app installation.
  • Encrypted Self-Hosted Vault
  • All 2FA secrets stored in encrypted SQLite on your own server, eliminating cloud synchronization risks and ensuring no third party ever accesses your authentication credentials.
  • WebAuthn Phishing-Resistant Login
  • FIDO2 hardware key authentication protects your 2FA vault with the strongest available login method, preventing phishing attacks that could compromise all your protected accounts.
  • Automatic Lock and OTP Obfuscation
  • Configurable idle timeout triggers automatic screen lock while generated codes display as dots until explicitly revealed, preventing shoulder surfing in shared environments.

Features

  • QR Code Scanner
  • Camera-based QR scanning adds accounts instantly from any service's setup page, with fallback manual entry for services that provide text-based secret keys.
  • Group Organization
  • Custom groups with drag-and-drop sorting categorize accounts by service type, importance, or any taxonomy, keeping large collections navigable.
  • REST API and Extensions
  • Programmatic access to OTP generation enables browser extensions and external applications to request codes directly from your 2FAuth instance.
  • Import and Export
  • Migration compatibility with Google Authenticator, Aegis, 2FAS, and plain-text formats enables painless transition without re-enrolling every account.
  • Progressive Web App
  • PWA installation places 2FAuth on your device home screen with offline-capable shell, providing native app experience without app store distribution.