php2fa

Shared two-factor codes for your team — with roles and an audit trail.

Personal accounts — everyone signs in with their own password
Passwords stored only as salted hashes, never in the clear
Secrets encrypted at rest, and every change is logged

TOTP · RFC 6238 · PBKDF2-SHA256 · AES-256-GCM

php2fa

Sign in

Enter your username and password.

Username

Password

Confirm password

This creates the first administrator account. Store these credentials safely.

Can't reach the server. Check your connection and reload the page.

php2fa

—

No accounts yet

Add your first account by scanning a QR code, pasting an otpauth:// link, or entering a setup key.

No accounts match your search.

Add account

Import from a QR code

or paste a setup link

Paste an otpauth:// link, or a Google Authenticator otpauth-migration:// export (imports several accounts at once).

Account details

These accounts were found in the export. Uncheck any you don't want, choose a folder below, then import.

Account name Setup key (Base32 secret)

Folder (optional)

Advanced options

Digits Period (s) Algorithm

Edit account

Account name Folder

Rename folder

Folder name Renames the folder for every account inside it.

Move to folder

Moving

Folder Choose an existing folder, type a new name, or clear it for no folder.

Secret key

Scan this QR code with another authenticator app, or enter the key below manually.

Setup key (Base32 secret)

Anyone with this key can generate your codes. Only reveal it on a device you trust.

Change password

You're using a temporary password. Choose a new one to continue.

Current password

New password

Confirm new password

Admin

Team accounts

Activity log

Add user

Username Role Temporary password

Share this with the new user. They must change it on first sign-in — you won't see their real password.

Edit user

Username Role

Reset password

New temporary password

Sets a new temporary password and signs the user out everywhere. They must change it on next sign-in.