Best Self-Hosted 2FA Authentication in 2026

Tools for implementing two-factor authentication to add an extra layer of security to user accounts and logins.

The top-rated pick is Ente with 28,252 GitHub stars.

5 self-hosted 2fa authentication — ranked by GitHub stars. Browse all

Ente

Open-source, end-to-end encrypted cloud for photos, videos, and 2FA secrets — a privacy-first Google Photos and iCloud Photos alternative.

Alternative to:

Google Photos

Authentik

Open source identity provider and SSO solution that replaces Auth0 and Okta with a self-hostable, flexible authentication platform.

Alternative to:

Auth0

Open Authenticator

Free, open-source cross-platform TOTP authenticator with self-hostable sync backend, built with Flutter.

Alternative to:

Google Authenticator

Toofer

Toofer is a local-first, web-based two-factor authentication app that stores your TOTP secrets directly in your browser. Private, simple, fully offline.

Alternative to:

Google Authenticator

Trezur

Fast, secure, light-weight web-app to generate TOTP and HOTP tokens.

Alternative to:

Google Authenticator

Why self-host?

Self-hosting puts you in control. You own your data, avoid vendor lock-in, and eliminate recurring subscription costs. For teams handling sensitive data or operating under strict compliance requirements, running your own infrastructure is often the only viable option.