OTPHub

OTPHub generates standard time-based one-time passwords (TOTP) locally on your device, and because it is open source under GPL-3.0 the code can be audited to verify secrets are not being sent anywhere. Unlike Authy there is no cloud account or phone-number dependency, so your 2FA secrets are never stored on a vendor's servers. As with any authenticator, overall security still depends on protecting your own device.

OTPHub is designed for both desktop and mobile platforms, but it deliberately does not use cloud synchronization — each installation holds its own copy of your secrets. That means no vendor ever sees your data, but you must add each account to every device manually using the setup QR code or secret. This offline model is the core privacy trade-off compared with sync-based apps like Authy.

OTPHub acts as a straightforward alternative to proprietary authenticator apps, providing time-based one-time password codes for two-factor authentication on the accounts that support them. It implements the standard TOTP protocol, so it works with any service that issues time-based codes. You get the same core functionality as Google Authenticator without ads, tracking, or vendor lock-in.