Features

Everything you need for secure, convenient two-factor authentication — across every device you own.

Multi-Platform Support

TwoFac runs natively on 11+ platforms. From phones and desktops to wearables, browsers, and the command line — your 2FA codes are always within reach. Every app is built with Kotlin Multiplatform for a truly native experience.

Android iOS macOS Windows Linux Web CLI Wear OS watchOS Chrome Firefox

Security First

Your 2FA secrets are encrypted end-to-end before they ever leave your device. TwoFac uses a zero-knowledge architecture so even we can't see your codes.

  • End-to-end encryption for all secrets and backups
  • Biometric authentication on Android and iOS (fingerprint, face unlock)
  • WebAuthn / passkey support in browser extensions
  • Secure session management with automatic lock

Wearable Integration

Check your 2FA codes with a glance at your wrist. TwoFac offers companion apps for both Wear OS and watchOS, with offline caching so your codes are available even when your phone isn't nearby. Accounts sync automatically whenever your watch is connected.

CLI Power Tools

Built for developers who live in the terminal. The TwoFac CLI lets you add and manage accounts, display codes with auto-refresh, create encrypted backups, and pipe OTP codes into scripts — all from the command line.

$ # Launch interactive TUI

$ twofac

$ # List all account codes with auto-refresh

$ twofac display

$ # Add account from URI

$ twofac accounts add "otpauth://totp/GitHub:user?secret=..."

$ # Create encrypted backup

$ twofac storage backup export --encrypted

Browser Extensions

Access your 2FA codes directly in your browser with extensions for Chrome and Firefox. TwoFac also works as a Progressive Web App (PWA), so you can install it on any platform with a modern browser for a lightweight, always-available experience.

Import & Migration

Switching to TwoFac is effortless. Import your existing accounts in one click from popular authenticator apps.

  • Authy — Import via JSON export
  • 2FAS — Import via JSON export
  • Ente Auth — Import via plaintext otpauth:// URIs
  • Google Authenticator — Import via QR code export

Open Source

TwoFac is fully open source under the MIT license. Every line of code is available for audit on GitHub. We believe security tools should be transparent, community-driven, and free for everyone to use, modify, and distribute.