Proton Authenticator. Has both Desktop and Mobile apps. Free. Don't have to sync to Proton.
this post was submitted on 13 Oct 2025
38 points (97.5% liked)
Selfhosted
52208 readers
538 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
Aegis
Yubikeys. I have 2 of them and both have the same entries in case one breaks.
I use freeotp+, but it looks like it could be dead now. But I does have an export to file.
Yubikey for 2Fa codes also works well for sudo and su (2Fa) or if you still use Windows I think it supports single sign on there. Absolutely worth the purchase have had my keys for years.
Can you explain a little more how you handle them in your daily life? I always liked the idea if Yubikeys, but I am a bit worried that I just would switch back to my phone (Aegis) for convenience. Things like:
Are there accounts that you didn't get to work? Do you have separate keys for personal and work accounts? Do you just have it on your keychain an plug it in whenever you need it? Because always plugged in keys in your phone or laptop doesn't really make sense. As far as I know you can't just clone a key. How easy is it to setup a backup key? Does this work for all accounts? I try to not use my phone for critical stuff, but there are times I have to just check an account. Do you use your phone with Yubikeys? How is your experience? USB or NFC?
We use yubikeys at work, far better then an OTP. Also I have 2 for home use, the only issue is I need to put 1 on some keys I carry as I sometimes need 1 and don't have it.
I like Aegis.
Enteauth
Bitwarden. I don't self host it, though. $10 a year for password management and 2FA is fine by me.
Yubikey. I dont want to trust my phone, so I use some separate hardware instead
I used aegis for a long time, switched to protons after they introduced it. Ideally I'd be using something physical though like a yubikey
I use Aegis, it works well
1password
Definitely this, especially if you'll be sharing with a non techie. My wife was able to pick 1password up and use it immediately and she normally turns her nose up at any of my recommendations.
For the 1password accounts 2FA, use a yubikey or aegis. Everything else to 1 password.
2FAS Authentication
Been using it for a while. It's pretty awesome.
I've been using KeePassXC. I use Syncthing to keep the database synchronized between computers.
Same here. If it's TOTP based 2fa, you can keep them in entries and use them from there.
Tbh, if you're using the same DB for PWs, you've successfully downgraded to 1FA now. Except maybe if you use a seperate KeyStick/Yubikey as secret bearer or smth
Bitwarden Authenticator because Bitwarden seems to have a good reputation. I don't use their password manager, though.
It does seem faintly insecure that it displays all of the codes at once on one page, but I'm having trouble imagining a scenario where it's actually a problem.
What you mean syncing with Gnome app?
I'm currently using FreeOTP from F-droid. Aegis seemed to have way too much extra crap. You don't want to sync multiple 2fa applications together since the idea of the 2nd factor is it's only in one place. Even being able to back it up is sort of contra, but if you have to, make sure the backup is well safeguarded.
The basic TOTP algorithm is quite easy to implement fwiw. A dozen or so lines of Python.
FreeOTP/FreeOTP+
depending on your goal for this (real 2fa vs just simulated) you shouldn't have sync in the first place.
you could also look into security keys (hardware solution, webauthn/FIDO2) as an alternative that has strong security with good user experience (no typing anymore), but they're not as widely accepted.