Open source 2fa projects

Every project in the registry tagged 2fa, ranked by real GitHub adoption.

projects 11 combined stars ★ 151K refresh nightly
01 Tailscale ★ 38K

Zero-config VPN with WireGuard for secure networking

last push24 hours ago languageGo licenseBSD-3-Clause
02 Ente ★ 30K

Secure, private photo storage and sharing solution

last push14 hours ago languageDart licenseAGPL-3.0
03 authelia ★ 29K

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

last push14 hours ago languageGo licenseApache-2.0
04 Zitadel ★ 15K

Secure, customizable identity infrastructure for developers

last pushyesterday languageGo licenseAGPL-3.0
05 Aegis Authenticator ★ 13K

2FA token manager for Android with encrypted vault

last push2 months ago languageJava licenseGPL-3.0
06 hanko ★ 9.1K

last push4 days ago languageGo licenseAGPL-3.0
07 tinyauth ★ 8.5K

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

last push18 hours ago languageGo licenseAGPL-3.0
08 otplib ★ 2.3K

One Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator

last push16 hours ago languageTypeScript licenseMIT
09 Authgear ★ 2.1K

Managed identity and access management for any app

last push4 days ago languageGo licenseApache-2.0
10 privacyidea ★ 1.8K

:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)

last push2 days ago languagePython licenseAGPL-3.0
11 webauthn-ruby ★ 777

WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party

last push10 days ago languageRuby licenseMIT

Related tags

← all tags

Frequently asked questions

How many open source 2fa projects are there?

This registry tracks 11 projects tagged 2fa, with 151,254 GitHub stars between them. The most-adopted is Tailscale at 38,497 stars.

Are these 2fa projects free to use?

Yes — 11 of the 11 carry an explicit open-source licence across 5 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which 2fa project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these 2fa projects still maintained?

11 of the 11 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.