2FAuth

What is 2FAuth?

2FAuth is a self-hosted web application for storing, organizing, and generating two-factor authentication (2FA) codes. Instead of locking your OTP secrets inside a closed vendor app tied to a single device or account, 2FAuth keeps them in a database you control and exposes them through a clean web interface that works from any modern browser.

It supports both TOTP (time-based, RFC 6238) and HOTP (counter-based, RFC 4226) algorithms, with account setup via QR-code scanning or manual entry. Accounts can be grouped, filtered, searched, and tagged with custom icons. A built-in web extension lets you capture new secrets or pull a fresh code without leaving the page you are signing in to.

Self-hosting and features

2FAuth is designed primarily for self-hosting. It ships a Docker image and runs on any PHP-capable host with a MySQL, PostgreSQL, or SQLite database. Multi-user mode adds isolated per-user vaults, optional shared groups for shared service accounts, and a registration toggle for closed teams. Authentication options include local password, WebAuthn passkeys, and SSO via an Authentication Proxy that bridges OIDC, SAML, or LDAP.

Other notable features:

• Encrypted secret storage with session auto-lock
• Import from and export to common formats (Authy, Aegis, Google Authenticator QR strings, generic JSON / CSV)
• REST API with personal access tokens for automation
• Auditable logs for OTP generations and vault accesses
• Theming, internationalization, and a fully responsive mobile UI

How it compares

Compared with Authy, Microsoft Authenticator, and Google Authenticator, 2FAuth removes the dependency on a single phone, a vendor account, or a closed mobile ecosystem. You can use it from a laptop, a tablet, or any browser, share 2FA across a small team, and back up your vault on your own terms. The trade-off is that you run and patch the server yourself.