2FAuth — One-Click Install

Name: 2FAuth
Author: Bubka

Manage your Two-Factor Authentication codes.

Security

Why install 2FAuth with Web.Casa?

One-Click Deploy

No manual Docker Compose needed. Web.Casa configures and starts everything.

Auto HTTPS

Caddy auto-provisions SSL certificates. Reverse proxy works out of the box.

Unified Management

Monitoring, backups, updates, logs — manage all apps from one panel.

How to Install

Install Web.Casa first, then one-click install this app from the App Store.

App Info

Version: 6.0.0
Author: Bubka
Default Port: 8235

Source Code Website

2FAuth

A web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

2FAuth Demo
Credentials (login - password) : [email protected] - demo

Purpose

2FAuth is a web based self-hosted alternative to One Time Passcode (OTP) generators like Google Authenticator, designed for both mobile and desktop.

It aims to ease you perform your 2FA authentication steps whatever the device you handle, with a clean and suitable interface.

I created it because :

Most of the UIs for this kind of apps show tokens for all accounts in the same time with stressful countdowns (in my opinion)
I wanted my 2FA accounts to be stored in a standalone database I can easily backup and restore (did you already encountered a smartphone loss with all your 2FA accounts in Google Auth? I did...)
I hate taking out my smartphone to get an OTP when I use a desktop computer
I love coding and I love self-hosted solutions

Main features

Manage your 2FA accounts and organize them using Groups
Scan and decode any QR code to add account in no time
Add custom account without QR code thanks to an advanced form
Edit accounts, even the imported ones
Generate TOTP and HOTP security codes and Steam Guard codes

2FAuth is currently fully localized in English and French. See Contributing if you want to help on adding more languages.

Security

2FAuth provides several security mechanisms to protect your 2FA data as best as possible.

Single user app

You have to create a user account and authenticate yourself to use the app. It is not possible to create more than one user account, the app is thought for personal use.

Modern authentication

You can sign in 2FAuth using a security key like a Yubikey or a Titan key and disable the traditional login form.

Data encryption

Sensitive data stored in the database can be encrypted to protect them against db compromise. Encryption is provided as an option which is disabled by default. It is strongly recommanded to backup the APP_KEY value of your .env file (or the whole file) when encryption is On.

Auto logout

2FAuth automatically log you out after an inactivity period to prevent long life session. The auto logout can be deactivated or triggered when a security code is copied.

RFC compliance

2FAuth generates OTP according to RFC 4226 (HOTP Algorithm) and RFC 6238 (TOTP Algorithm) thanks to Spomky-Labs/OTPHP php library.

FAQ

Can I install 2FAuth on Web.Casa?

Yes, 2FAuth is available in the Web.Casa App Store. You can install it with one click from the Web.Casa panel — no need to manually write Docker Compose files or configure reverse proxies.

How do I install 2FAuth on Web.Casa?

First install Web.Casa with curl -fsSL https://get.web.casa | bash, then search for "2FAuth" in the App Store and click install. Web.Casa automatically configures the Docker container, assigns ports, and sets up a Caddy reverse proxy.

What is the default port for 2FAuth on Web.Casa?

The default port for 2FAuth on Web.Casa is 8235. You can bind it to a custom domain through Web.Casa's Caddy reverse proxy, which automatically provisions HTTPS certificates.

Does 2FAuth get automatic HTTPS after installation?

Yes. Web.Casa is built on Caddy, so after installing the app, simply bind a domain and Caddy will automatically provision and renew SSL certificates via Let's Encrypt — no manual configuration needed.

How do I back up 2FAuth data?

Web.Casa has a built-in backup plugin that supports automatic backups of 2FAuth data to local storage, S3, WebDAV, or SFTP. You can configure scheduled snapshots and retention policies to keep your data safe.