I self hosted 2FAuth (not my project, but still awesome!) to manage my two factor codes online. I have the convenience of online codes that I could manage myself. I also took it a step further and made an Android app for it as well. I used to use Aegis before finding this project, and I missed the convenience of having a mobile app that I could just open instantly with my fingerprint.

It syncs over the list of accounts from the 2FAuth server, lets you view, copy, edit, and even create new accounts through QR code scanning. It also works completely offline after the first initial sync, so even when you don't have a good connection to your server, you can still get your two factor codes.

I plan to add more features that work offline, mainly creating accounts; it's still early in development, so I'd appreciate any feedback!

Feel free to check out 2FAuth and auff if it's something you're interested in!

top 1 comments

sorted by: hot top controversial new old

[–] dbx12@programming.dev 11 points 10 months ago

Wow, we gone full circle here. 2FA (the "protocol", not the application mentioned in the OP) was conceived to increase security by requiring a second factor (not second secret). So we would need the password (knowledge based authentication) and the code generating hardware (possession based authentication). If we stuff all our 2FA secrets into a web service, we efficiently removed the possession factor of the authentication, making it one where two knowledge factors (password for the thing you want to login to and password for the hosted 2FA storage) are sufficient.