Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Zero-TOTP review

Free#65 of 111 in Authenticator Apps

A privacy-oriented web vault for TOTP codes, with hosted and self-hosted options.

3.0/10Editor score
Visit Zero-TOTP
Zero-TOTP3.0 Visit Zero-TOTP

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Zero-TOTP is a free, open-source web authenticator for storing and retrieving TOTP codes. It suits solo users and small organizations who want a browser-based vault and value control over where it runs. The hosted web app offers a simpler route, while self-hosting lets users run their own instance. Vault data is stored locally on the user's machine and encrypted on the client using a zero-knowledge model, so the server cannot access the codes.

The central feature is its backup and recovery design. Zero-TOTP can create encrypted backups in Google Drive or on a local machine, and a separate rescue site can retrieve codes from a backup file if the primary instance is unavailable. The project describes AES-256 encryption and client-side key derivation as part of its protection approach. This setup may appeal to users who want a recovery path without giving the hosted service access to their vault, though it relies on managing backup files and access to the chosen storage.

Its scope is deliberately narrow: the supported options are the web app and self-hosted web app, while iOS and CLI apps are not in development. There are no team administration features or push approvals, and Google Drive is the only listed integration. Choose Zero-TOTP if a free, open-source TOTP vault with self-hosting and encrypted backups fits a web-based workflow. Users who need mobile apps, multi-user administration, or broader platform coverage should consider another authenticator.

Zero-TOTP pros and cons

  • Where it wins
    • Client-side zero-knowledge encryption keeps vault codes inaccessible to the server.
    • Offers both a hosted web app and a self-hosted web app.
    • Encrypted Google Drive backups can be opened through a separate rescue site.
  • Where it doesn't
    • Access is web-only; iOS and CLI apps are not in development.
    • Google Drive is the only listed integration.
    • No team administration or push approvals.

Zero-TOTP fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update