Frequently Asked Questions
Everything you need to know about TwoFac. Can't find an answer? Ask on GitHub Discussions.
TwoFac is an open-source, cross-platform two-factor authentication (2FA) app. It generates time-based one-time passwords (TOTP) to add an extra layer of security to your online accounts. TwoFac is built with Kotlin Multiplatform and runs natively on Android, iOS, macOS, Windows, Linux, Web, CLI, and wearables.
Yes, TwoFac is completely free and open source under the MIT license. There are no premium tiers, no ads, and no tracking. You can use it on as many devices as you like at no cost.
TwoFac runs on Android, iOS, macOS, Windows, Linux, Web (PWA), CLI, Wear OS, watchOS, and as browser extensions for Chrome and Firefox.
If you've set up encrypted backups, you can restore all your accounts on a new device in seconds. We strongly recommend enabling backups as soon as you start using TwoFac. Your backup is encrypted with a passkey, so only you can decrypt it.
Yes! TwoFac supports importing from Authy (JSON), 2FAS (JSON), and Ente Auth (plaintext otpauth:// URIs). Google Authenticator accounts can be imported via QR code export.
Your 2FA secrets are encrypted with a passkey before being stored or transmitted. This means nobody — not even the server — can read your secrets. Only devices that have your passkey can decrypt and display your codes.
Google Authenticator can export accounts via QR codes. In TwoFac, use the import feature to scan these QR codes and all your accounts will be transferred automatically. Check our blog for a detailed step-by-step guide.
Yes, all 2FA code generation happens entirely offline on your device. TOTP codes are computed locally using the shared secret and the current time — no internet connection is needed to generate or view your codes.
TwoFac is fully open source, so anyone can audit the code. We welcome security researchers to review our codebase on GitHub and report any issues through responsible disclosure. Community audits are one of the key benefits of open-source security software.
TwoFac is on GitHub! You can contribute code, report bugs, suggest features, or help with documentation. Check out the repository's CONTRIBUTING guide to get started. All contributions are welcome, from typo fixes to new platform support.