Go · npm99Exceptionalhealth index

authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™
Go · TypeScript★ 28.5KAug 5, 2026
Packagist89Excellenthealth index
Spomky-Labs/otphp:closed_lock_with_key: A PHP library for generating one time passwords according to RFC 4226 (HOTP) and the RFC 6238 (TOTP)
PHP★ 1,477↓ 1.4M/moJul 16, 2026
npm87Excellenthealth index
authup/authupSelf-hosted authentication & authorization system (IAM: OAuth2 & OpenID Connect provider with realms, RBAC & ABAC policies, MFA (TOTP, passkeys, email OTP), identity federation (OIDC, LDAP) and session management.
TypeScript · Vue★ 40↓ 13.5K/moJul 22, 2026
npm87Excellenthealth index

yeojz/otplibOne Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
TypeScript★ 2,284↓ 48.2M/moAug 13, 2026
Packagist86Excellenthealth index
PHP★ 2,007↓ 6.9M/moAug 27, 2026
C#★ 243Jul 17, 2026

ZYLVEXT/litestar-authFail-closed human and workload authentication for Python and Litestar: opaque sessions, mTLS, DPoP, SPIFFE, webhooks, and HTTP signatures.
Python★ 3↓ 2,701/moAug 23, 2026
Packagist · npm77Goodhealth index
JavaScript · PHP★ 8↓ 6,043/moJul 22, 2026
crates.io69Goodhealth index

constantoine/totp-rsRFC-compliant TOTP implementation with ease of use as a goal and additionnal QoL features.
Rust★ 271↓ 973.9K/moAug 9, 2026
JLugagne/egauthComposable, non-opinionated authentication toolkit for Go — import the modules you need (identity, tokens/JWT, sessions, passkeys, OAuth/OIDC, MFA, OTP) and wire them with DI. Secure-by-default, no framework.
Go★ 0Aug 3, 2026
C★ 554Jul 17, 2026
PyPI63Moderatehealth index

usestapel/stapel-authFull-featured authentication Django app — JWT, passkeys, TOTP, QR, OAuth, SSO, magic link
Python★ 0↓ 4,163/moSep 6, 2026
npm62Moderatehealth index
askrjs/askr-authShared authentication contracts and request authentication for Askr.
TypeScript★ 0↓ 3,499/moAug 2, 2026
Maven59Moderatehealth index

BastiaanJansen/otp-javaA small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).
Java★ 241Aug 17, 2026
npm56Moderatehealth index
JavaScript · Go Template★ 14Sep 5, 2026
PyPI56Moderatehealth index
Python★ 3,334↓ 42.2M/moAug 27, 2026
Packagist54Moderatehealth index

MincDev/php-otpauthA lightweight PHP library for generating and validating TOTP authentication codes and QR codes compatible with Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, and other RFC 6238 authenticator apps.
PHP★ 5↓ 2,214/moAug 22, 2026
Go · npm54Moderatehealth index

Sammy-T/avdaA desktop app for generating and viewing one-time passwords from Aegis Authenticator backups.
Svelte · NSIS · JavaScript★ 63Sep 5, 2026
Go★ 6Jul 27, 2026
Sammy-T/avduA utility to view one-time passwords generated from Aegis Authenticator backups.
Go★ 3Aug 1, 2026
Packagist51Moderatehealth index
PHP★ 19↓ 10.2K/moAug 5, 2026
npm50Moderatehealth index
TypeScript · Svelte★ 1↓ 2,058/moJul 23, 2026
Hex50Moderatehealth index
Elixir★ 476↓ 94.6K/moJul 18, 2026
kspearrin/Otp.NETA .NET implementation of TOTP and HOTP for things like two-factor authentication codes.
C#★ 1,313Jul 18, 2026
Python★ 40↓ 499.4K/moJul 21, 2026
TypeScript★ 0↓ 2,538/moAug 25, 2026
crates.io41Weakhealth index
Rust★ 0↓ 20/moJul 28, 2026
Go★ 3Aug 16, 2026
JavaScript★ 13↓ 4,144/moSep 3, 2026
Go★ 0Aug 31, 2026