Zero-TOTP

Self-Hosted

Open-source, offline zero-trust TOTP authenticator

Overview

Zero-TOTP is an open-source, offline-first TOTP authenticator built for zero-trust security. It enables users to generate 2FA codes without relying on third-party services, with encrypted local credential storage and secure cross-device sync options. Deployable via Docker or standalone binaries for Windows, macOS, and Linux, it avoids cloud dependencies to prioritize privacy. Key features include standard TOTP algorithm support, password-protected access, and encrypted backups, making it ideal for users seeking full control over their two-factor authentication setup.

Self-Hosting Resources

Find Official Image on Docker Hub View Source & Docs

Below is a reference structure for docker-compose.yml. ⚠️ Do NOT run blindly. Replace placeholders with official values.

docker-compose.template.yml TEMPLATE


version: '3'
services:
  zero_totp:
    image: <OFFICIAL_IMAGE_NAME>:latest
    container_name: zero-totp
    ports:
      - "8080:<APP_INTERNAL_PORT>"
    volumes:
      - ./data:/app/data
    restart: unless-stopped

Key Features

Offline TOTP code generation
Encrypted local credential storage
Secure cross-device sync options
Docker & standalone deployment

Frequently Asked Questions

? Is Zero-TOTP hard to install?

Zero-TOTP is easy to install using Docker (via a simple docker-compose command) or standalone binaries for major OSes. Official docs provide clear steps for both methods, making it accessible to users with basic technical knowledge.

? Is it a good alternative to Google Authenticator?

Yes—Zero-TOTP offers offline functionality and no cloud sync (unlike Google's optional backup), which is better for privacy. It also supports self-hosting for full credential control, though it lacks some mobile-first features of Google Authenticator.

? Is Zero-TOTP completely free?

Yes—Zero-TOTP is open-source under the MIT License, so it's completely free to use, modify, and self-host without any hidden fees or subscriptions.

Top Alternatives

Google Authenticator Search Google

Authy Search Google

Microsoft Authenticator Search Google

Tool Info

Pricing Free/Open Source

Category Miscellaneous

Platform Self-Hosted

Pros

⊕ Zero cloud dependency (privacy-focused)
⊕ Open-source code (auditable security)
⊕ No subscription fees
⊕ Supports encrypted backups

Cons

⊖ Requires basic technical setup for self-hosting
⊖ Limited mobile app support (primarily desktop/web)
⊖ Sync requires manual secure transfer (no auto-cloud sync)