About Auth2FA

Auth2FA is a simple, secure TOTP (Time-based One-Time Password) authenticator designed to make two-factor authentication (2FA) easy for everyone — developers, teams, and everyday users. We provide a fast, reliable way to generate short-lived verification codes that add a second layer of protection to your accounts and services.

Why use Auth2FA?

• Stronger security: TOTP codes drastically reduce account takeover risk by requiring something you know (password) and something you have (the authenticator).
• Privacy-first: Auth2FA does not collect unnecessary personal data — your secrets stay on your device unless you choose otherwise.
• Open & interoperable: Works with any service that supports standard TOTP (RFC 6238) — QR codes, manual keys, and export/import where supported.
• Easy to use: Clean interface and clear onboarding so non-technical users can enable 2FA in minutes.

How it works

TOTP creates a temporary code using a shared secret (a base32 key) and the current time. When you add a service to Auth2FA, it stores the secret locally and uses it plus the current time to generate six-digit codes that refresh every 30 seconds. When you log in to a service that uses TOTP, you enter the current code from Auth2FA — the service independently computes the same code and verifies it.

Key features

• QR code scanning: Add accounts quickly by scanning the QR code provided by websites and services.
• Manual key entry: Add accounts using a provided secret key when QR scanning isn’t available.
• Labeling & icons: Organize accounts with custom labels so codes are easy to recognize at a glance.
• Export / backup (optional): Export encrypted backups of your keys if you want to migrate devices — opt-in only.
• Compatibility: Works with major providers and self-hosted systems that implement standard TOTP.

Security & privacy

Security is central to how Auth2FA is designed:

• Local-first: Secrets are stored locally on your device by default — not on our servers — unless you explicitly use an optional backup feature.
• Encryption: When backups or device sync are used, secrets are encrypted before leaving your device using strong, industry-standard cryptography.
• No tracking: We don’t track the services you add or the codes you generate.
• Minimal permissions: The app requests only the permissions necessary to scan QR codes and store local data.

Getting started

1. Open the website or app where you want to enable 2FA and choose the TOTP/Authenticator option.
2. Scan the displayed QR code with Auth2FA or copy the provided secret key into the app.
3. Enter the six-digit code generated by Auth2FA into the website to confirm setup.
4. Keep a secure backup of recovery codes provided by the service — these are the safest way to recover access if you lose your device.

Best practices

• Keep recovery codes in a safe place (physical or encrypted digital vault).
• Use Auth2FA alongside a strong, unique password for each account.
• Enable optional encrypted backups only if you understand and trust the backup workflow.
• Regularly review and remove old or unused 2FA entries.

Support & feedback

If you need help setting up Auth2FA, have feature requests, or discover a security issue, please contact our support team. We welcome feedback from users and contributors to help make the product more reliable and easier to use.

Partner: priyo.email