2FAuth

2FAuth is a self-hosted web application used to manage two-factor authentication accounts and generate security codes. It functions as a centralized server for storing one-time passcode (OTP) credentials, allowing users to access their authentication tokens from any device with a web browser. This deployment model removes the dependency on a specific mobile device, as the codes are served via a web interface accessible from both desktop and mobile browsers.

The application is designed specifically for personal use by a single user. It provides a dedicated interface for organizing accounts and retrieving time-based or counter-based codes. By hosting the service on a private server, users can maintain a standalone database of their authentication seeds, which facilitates easier backup and restoration processes compared to device-bound authentication apps.

Key features

• Generation of TOTP, HOTP, and Steam Guard security codes
• QR code scanning and decoding for rapid account addition
• Organization of authentication accounts using groups
• Support for importing data from Google Auth, Aegis, and 2FAS
• Optional encryption for sensitive data stored in the database
• Hardware security key support for user authentication
• Automatic session logout after periods of inactivity
• Compliance with RFC 4226 and RFC 6238 standards

Built with the Laravel framework, the software supports any database compatible with that environment. The architecture emphasizes security through several mechanisms, including the ability to disable traditional login forms in favor of security keys like Yubikey or Titan keys. To protect against database compromises, the application offers an optional encryption layer for sensitive data, which relies on a specific application key stored in the environment configuration.

The system includes an advanced manual entry form for adding accounts when a QR code is unavailable and supports localization in English and French. It is intended for individuals who want a private, self-managed repository for their 2FA seeds that avoids the stress of countdown timers often found in standard OTP interfaces.

2FAuth is a private utility for users seeking a self-managed and portable approach to multi-factor authentication storage.