Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

SelfHostAuth review

Free#48 of 111 in Authenticator Apps

A free, open-source authenticator for teams and individuals managing their own infrastructure.

4.4/10Editor score
SelfHostAuth4.4 Visit SelfHostAuth

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

SelfHostAuth is an open-source, self-hosted authenticator and 2FA synchronization server for privacy-conscious individuals, homelab users, and teams that want to operate their own authentication infrastructure. It generates RFC-compliant TOTP and HOTP codes, imports secrets through QR, otpauth://, or Base32 formats, and provides a web-based authenticator vault alongside native applications and browser extensions.

The published product details show a free, open-source model rather than a tiered commercial offering. SelfHostAuth is self-hosted only, with no hosted version available, so its fit is strongest for buyers who want to run the service themselves instead of relying on a hosted authenticator service. Vault data is encrypted at rest with AES-256-GCM, while revision-based synchronization supports multiple devices. Offline vault caching and local code computation also support access when a device is offline.

Platform coverage is a central strength. SelfHostAuth provides web access, Windows, macOS, and Linux desktop applications, iOS and Android mobile applications, plus a browser extension for Chrome, Edge, and Firefox. That breadth makes it suitable for users who move between desktop, mobile, browser, and self-managed environments. It does not support push approvals, and buyers looking for a hosted service or push-based authentication should choose an alternative. For self-hosters who need TOTP and HOTP coverage across many device types, SelfHostAuth is a focused option with a broad client footprint.

SelfHostAuth pros and cons

  • Where it wins
    • Supports TOTP and HOTP with QR, otpauth://, and Base32 imports
    • Encrypts vaults at rest with AES-256-GCM
    • Offers web, desktop, mobile, and browser extension clients
  • Where it doesn't
    • Self-hosted only; no hosted version is available
    • Does not support push approvals
    • Requires operating your own authentication infrastructure

SelfHostAuth fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update