SHSelfHostIndex

2FAuth

Self-hosted web app to manage two-factor authentication codes

Identity & SSO ★ 4.2k stars Easy setup AGPL-3.0

2FAuth is an open-source web application for managing two-factor authentication TOTP and HOTP accounts. It is self-hosted to store and generate one-time codes from a single secure place.

Official siteSource code

Key features

  • TOTP and HOTP management
  • QR code import
  • Web and PWA access
  • Encrypted storage

Strengths

  • Released under the AGPL-3.0 license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Active community (4.2k GitHub stars)

Is 2FAuth secure?

No known vulnerabilities affect 2FAuth's latest release (v8.0.2). OSV.dev lists 5 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-32133, published 2026-03-11 (217 days ago), fixed in 6.1.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

2FAuth replaces

Self-hosted Authy alternativesSelf-hosted Google Authenticator alternatives

Health badge

Maintain 2FAuth? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 91 · excellent

Markdown
[![SelfHostIndex health score for 2FAuth](https://selfhostindex.com/badge/2fauth.svg)](https://selfhostindex.com/app/2fauth/)
HTML
<a href="https://selfhostindex.com/app/2fauth/"><img src="https://selfhostindex.com/badge/2fauth.svg" alt="SelfHostIndex health score for 2FAuth"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/2fauth.svg
   :alt: SelfHostIndex health score for 2FAuth
   :target: https://selfhostindex.com/app/2fauth/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar identity & sso apps