2FAS

2FAS is a privacy-focused authenticator and password manager built for people who want full control over their security data. Everything stays on your device by default. No account, no server, no data collection. That's the core premise.

The authenticator handles TOTP-based two-factor authentication tokens. You can organize tokens with custom icons, badges, groups, and labels. Backup options give you a choice between cloud sync or manual exports, and Apple Watch support adds quick access without pulling out your phone. The app works entirely offline.

The password manager stores credentials locally and pairs with a browser extension that shares selected passwords with your browser securely. It supports three security tiers so you can tune how aggressively items are protected. Like tools such as Bitwarden or KeePassXC, it gives you self-hostable vault storage, but 2FAS combines that with a native mobile-first experience rather than a desktop-centric one.

Key capabilities across both tools:

• Local-first storage with self-hostable vault options
• Zero-knowledge design so 2FAS never sees your data
• On-device encryption where only you hold the keys
• No account required for fully anonymous use
• Browser extension for secure password sharing with selected sites
• Token customization with icons, labels, badges, and groups
• Offline operation with no dependency on external servers

The source code is public and accompanied by a Cryptography White Paper that documents the encryption algorithms and design decisions. That level of transparency puts it in different territory from closed-source alternatives like LastPass or 1Password.

Native iOS and Android apps keep the experience tight. The project is community-driven, with crowdsourced translations and an active Discord and GitHub presence. Over six million downloads and consistently high app store ratings reflect a user base that's stuck with it long-term.