Features: Device synchronization, modern user-interface and backups. The main advantages are the browser extensions that enable one-tap authentication and no need to switch between devices. Token import available from: Google authenticator, Aegis, Raivo OTP and LastPass.
Reviewed by Marco Wollank
2FAS
2fas.com No ratings yet. Be the first.
Rate 2FAS: No account needed
Threat level
Covered
A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
Our take
2FAS earns its place with the browser-extension trick: one tap on the desktop instead of grabbing your phone and squinting at a six-digit code. It is open source and cross-platform, though leaning on browser extensions and device sync adds a little more moving machinery than a stripped-down offline app. Choose it if the desktop one-tap convenience genuinely fits your day; if you would rather keep everything offline on one device, a simpler app suits you better.
GitHub at a glance
twofas/2fas-android
Stars
1,483
+ 15 this week
Last commit
4mo ago
healthy
License
GPL-3.0
Latest release
5.5.3
4mo ago
Stars, last 31d
Website at a glance
2fas.com
B score 75
Solid website security headers
Graded by Mozilla HTTP Observatory, tested today
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
2FAS alternatives
ente Authenticator Features: End-to-end encrypted cloud backups and multi device synchronization. Offline mode and import & export tokens. It's the only open-source solution that is available for…
Aegis Authenticator Aegis Authenticator: Encryption, Organization and Backups for Android
Tofu Tofu: Easy-to-use and designed specifically for iOS
Raivo OTP Unlisted for now because Raivo was sold, and the new owner wasn't able to clarify concerns listed in the GitHub discussion. The warning will be removed once the situation is…
Yubico Authenticator A TOTP authenticator app that stores one-time password secrets on a YubiKey hardware key rather than on the device, available on Windows, Mac, Linux, and Android.
2FAS license, in plain English
GPL-3.0 Strong copyleft
Free to use and modify, but anything you distribute that is built on it must also be open under the same license.
Permits
- Commercial use
- Modification
- Distribution
- Patent use
- Private use
Requires
- Disclose source
- Same license
- State changes
- License and copyright notice
Does not provide
- Liability cover
- Warranty
Why it matters: Strong copyleft keeps every distributed version open. A vendor cannot fold this into a closed product and ship it without releasing their changes.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.
* Average ratings will show on this page once the threshold of 5 ratings is reached.