A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Go to file
2022-03-31 11:24:01 +02:00
.github CI fix try 3 (#46) 2021-09-09 10:57:38 +02:00
app Update services doc block 2022-03-31 11:24:01 +02:00
bootstrap initial commit 2019-05-20 07:37:41 +02:00
config Enable CORS 2022-03-31 11:24:01 +02:00
database Fix reset-demo artisan command and its test 2022-03-31 11:24:01 +02:00
docker Drop PHP7.3 support 2022-03-31 11:24:01 +02:00
docs Drop PHP7.3 support 2022-03-31 11:24:01 +02:00
public Recompile assets 2021-03-04 21:28:12 +01:00
resources Show actions instead of error when QR code is not a valid otp auth uri 2022-03-31 11:24:01 +02:00
routes Add versioning to Laravel routes 2022-03-31 11:24:01 +02:00
storage Prefill icon field with imageLink resource 2020-11-18 23:48:51 +01:00
tests Reorganize and enhance tests 2022-03-31 11:24:01 +02:00
.dockerignore Docker ignore webpack.mix.js 2021-08-02 23:31:31 -04:00
.editorconfig initial commit 2019-05-20 07:37:41 +02:00
.env.example Add logs 2022-03-31 11:24:01 +02:00
.env.testing in memory db for testing 2019-05-23 21:27:27 +02:00
.env.travis in memory db for testing 2019-05-23 21:27:27 +02:00
.gitattributes initial commit 2019-05-20 07:37:41 +02:00
.gitignore Set repo to handle vscode files 2022-03-31 11:24:00 +02:00
.styleci.yml initial commit 2019-05-20 07:37:41 +02:00
.travis.yml Drop PHP7.3 support 2022-03-31 11:24:01 +02:00
artisan initial commit 2019-05-20 07:37:41 +02:00
changelog.md Complete changelog 2021-03-04 21:25:45 +01:00
composer.json Reorganize and enhance tests 2022-03-31 11:24:01 +02:00
composer.lock Replace abandoned fzaninotto/faker package 2022-03-31 11:24:01 +02:00
crowdin.yml Add Crowdin configuration file 2020-10-14 23:18:51 +02:00
Dockerfile Drop PHP7.3 support 2022-03-31 11:24:01 +02:00
jsconfig.json Set repo to handle vscode files 2022-03-31 11:24:00 +02:00
LICENSE Add LICENSE file 2020-01-11 00:13:04 +01:00
package-lock.json Update package-lock to v2 2022-03-31 11:24:00 +02:00
package.json Upgrade bulma.css to v0.9.2 2022-03-31 11:24:00 +02:00
phpunit.xml Reorganize and enhance tests 2022-03-31 11:24:01 +02:00
README.md Drop PHP7.3 support 2022-03-31 11:24:01 +02:00
server.php initial commit 2019-05-20 07:37:41 +02:00
webpack.mix.js Add sourceMap generation (deactivated, for later use) 2022-03-31 11:24:01 +02:00

2FAuth

https://travis-ci.com/github/Bubka/2FAuth Docker build status https://codecov.io/gh/Bubka/2FAuth https://github.com/Bubka/2FAuth/blob/master/LICENSE

A web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

screens

2FAuth Demo

Use it with Docker

Credentials (login - password) : demo@2fauth.app - demo

Purpose

2FAuth is a web based self-hosted alternative to One Time Passcode (OTP) generators like Google Authenticator, designed for both mobile and desktop.

It aims to ease you perform your 2FA authentication steps whatever the device you handle, with a clean and suitable interface.

I created it because :

  • Most of the UIs for this kind of apps show tokens for all accounts in the same time with stressful countdowns (in my opinion)
  • I wanted my 2FA accounts to be stored in a standalone database I can easily backup and restore (did you already encountered a smartphone loss with all your 2FA accounts in Google Auth? I did...)
  • I hate taking out my smartphone to get an OTP when I use a desktop computer
  • I love coding and I love self-hosted solutions

Main features

  • Manage your 2FA accounts and organize them using Groups
  • Scan and decode any QR code to add account in no time
  • Add custom account without QR code thanks to an advanced form
  • Edit accounts, even the imported ones
  • Generate TOTP and HOTP security codes

2FAuth is currently fully localized in English and French. See Contributing if you want to help on adding more languages.

Security

2FAuth provide with several security mechanisms to protect your 2FA data as best as possible.

Single user app

You have to create a user account and authenticate yourself to use the app. It is not possible to create more than one user account, the app is thought for personal use.

Data encryption

Sensitive data stored in the database can be encrypted to protect them against db compromise. Encryption is provided as an option which is disabled by default. It is strongly recommanded to backup the APP_KEY value of your .env file (or the whole file) when encryption is On.

Auto logout

2FAuth automatically log you out after an inactivity period to prevent long life session. The auto logout can be deactivated or triggered when a security code is copied.

RFC compliance

2FAuth generates OTP according to RFC 4226 (HOTP Algorithm) and RFC 6238 (TOTP Algorithm) thanks to Spomky-Labs/OTPHP php library.

Requirements

Installation (using command line)

Guides

Searching for a guide on how to set up your running environment and deploy 2FAuth?

Here are the guides available:

Clone the repo

git clone https://github.com/bubka/2fauth.git

Install all php dependencies

php composer.phar install

Don't have composer? you can get it here

Set up your database

Create a database with one of the supported tools (see Requirements). For SQLite, place the database .sqlite file in the database/ folder of your 2FAuth installation.

Set your variables

In your installation directory make a copy of the .env.example file and rename the copy .env. Edit the .env file and adapt the settings to your running environment (see instructions in the file)

Prepare some stuff

php artisan migrate:refresh
php artisan passport:install
php artisan storage:link
php artisan config:cache

You are ready to go.

For development only

Checkout the 'dev' branch then install and build js dependencies

npm install
npm run dev

Upgrading

First, backup your database.

Then, using command line :

git pull
php composer.phar install
php artisan migrate
php artisan config:clear

Contributing

You can contribute to 2FAuth in many ways:

License

AGPL-3.0