Skip to content

2FAuth

Secrets & Credentials

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

Track releases GitHub Website
PHP Latest v6.1.3 · 2mo ago Security brief →

Features

  • Manage and organize 2FA accounts using groups
  • Scan QR codes or add custom accounts via an advanced form
  • Generate TOTP, HOTP, and Steam Guard security codes

Recent releases

View all 5 releases →
v6.1.3 Bug fix

Fixed UI issues including the grayed-out 'Try my luck' feature. This update resolves visual glitches that were preventing users from accessing functionality they expected to work.

View release on GitHub
v6.1.0 Security relevant
Security fixes
  • Blind SSRF vulnerability mitigation via URL validation
  • CVE-2025-45769 (firebase/php-jwt < 7.0.0)
Notable features
  • Chinese Traditional translation
  • QR code paste on upload page
  • SSRF protection controls
View release on GitHub
v6.0.0 Breaking risk
Breaking changes
  • PHP 8.3 support dropped
  • APP_KEY Docker environment variable no longer set at build time
Notable features
  • Shared Vue components between web and extension
  • Lucide icon integration
  • Icon pack offline support
View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
3,970
Forks
286
Languages
PHP Vue RobotFramework
View on GitHub Homepage Live demo

Install & Platforms

Install via
docker docker-compose

Similar tools

authelia
authentik
authgear-server
logto
Yopass

Alternative to

Google Authenticator

Beta — feedback welcome: [email protected]