Open2FA — a free and open-source generator for two-factor authentication (2FA) codes. Lightweight, fast, and privacy-first.
✨ Features
- Open-source: transparent and community-driven.
- Lightweight: no tracking, no telemetry.
- Standards compliant: supports TOTP (time-based) and HOTP (counter-based).
- Simple: paste an otpauth URI or enter a Base32 secret manually.
- Private: no account required, no server storage.
🔧 How it works
- Paste your 2FA setup link (
otpauth://
) or manually enter a Base32 secret. - Open2FA parses the parameters (algorithm, digits, period, counter).
- The tool generates OTP codes instantly according to the specification.
Example URIs:
otpauth://totp/Service:username?secret=JBSWY3DPEHPK3PXP&issuer=Service&digits=6&period=30
otpauth://hotp/Service?secret=JBSWY3DPEHPK3PXP&issuer=Service&digits=6&counter=1
🛡️ Security & Privacy
- No tracking or analytics.
- No server-side storage: your secrets never leave your device.
- Open code: fully verifiable and community-audited.
Note: Always back up your secrets and recovery codes safely. Losing them may lock you out of your account.
🚀 Quick Start
- Open Open2FA.
- Paste an
otpauth://
URI or enter a Base32 secret. - For TOTP: codes refresh every
period
seconds (default: 30).
For HOTP: press "Next" to increment the counter.
⚙️ Parameters
algorithm
: SHA1 (default), SHA256, SHA512digits
: 6 (default), 7, 8period
(TOTP): 30 (default)counter
(HOTP): integer value
❓ FAQ
Q: I only have a Base32 secret, no otpauth link. What do I do?
A: Use "Enter secret" and manually specify the parameters (digits, period, algorithm).
Q: My TOTP codes are incorrect.
A: Check your system clock. TOTP is time-sensitive and requires accurate system time.
Q: Does Open2FA save my secrets?
A: No. All data is processed locally on your device.
Q: Does it support QR codes?
A: If your version includes a QR scanner, you may use it. Otherwise, decode the QR code with another tool and paste the otpauth link.
🧩 Compatibility
- RFC 4226 (HOTP) compliant.
- RFC 6238 (TOTP) compliant.
- Works with most services that provide standard 2FA.
🗂️ Permissions
- Clipboard (optional): allows faster paste of secrets or codes.
- No sensitive or unnecessary permissions required.
🧪 Test Vectors
You can verify correctness with known test values:
Secret (Base32): JBSWY3DPEHPK3PXP
TOTP (SHA1, 6 digits, 30s): matches reference implementations
HOTP (counter-based): produces a valid sequence of codes
🔄 Changelog
- v1.0.0: Initial release with TOTP/HOTP support, otpauth parser, copy-to-clipboard.
🤝 Contributing
- Report bugs or suggest improvements.
- Contribute code following the project’s style and test guidelines.
📜 License
Licensed under a permissive open-source license (MIT). Free to use, modify, and share.
⚠️ Disclaimer
Open2FA provides standard-compliant 2FA code generation. You are responsible for keeping your secrets safe and securing your accounts. Always enable backup recovery methods for critical services.