2FAuth

Is 2FAuth actively maintained?

Over the last 11 months the project absorbed 326 commits, of which 124 arrived in the most recent quarter — roughly 41 commits a month.

The most recent tagged release, v8.0.2, shipped within the last month — a current, installable version exists today.

Of the 77 projects we track in Miscellaneous, 2FAuth ranks #14 by health score — in the top quarter of its category.

What 2FAuth actually does

2FAuth is a self-hosted web application designed to store two-factor authentication accounts and generate their respective security codes. It provides a centralised interface for managing time-based one-time passwords independently of mobile apps or proprietary cloud ecosystems. The project is implemented in PHP and distributed under the AGPL-3.0 licence.

Best fit: This is a suitable tool if you want to migrate your 2FA token management away from consumer-oriented phone apps and keep your authentication seeds on your own infrastructure.

Worth knowing: Hosting your own 2FA generator creates a single point of failure; if your server goes down or loses its data, you may lose access to all associated accounts unless you maintain separate offline backups of your recovery codes.

Deployment notes

Deployment is typically handled via Docker, requiring persistent storage for database or configuration files to prevent data loss between container restarts. You will also need to place the instance behind a reverse proxy to handle TLS termination securely.

Links

• Official website
• Source code
• Live demo