Why this exists
Two-factor authentication is common, but its setup screens still assume that everyone understands shared secrets, backup codes, clock drift, recovery factors, and phishing. 2FAOTP turns those hidden mechanics into plain choices—starting with how TOTP works and our full library of 2FA guides.
The project has two deliberately separate parts: an authenticator that calculates a time-based code inside the browser, and an editorial site that explains how authentication methods work. Keeping them separate allows the tool to avoid third-party scripts while the educational work remains sustainable.
Editorial principles
- Write for a person solving a real account-security problem.
- Distinguish standards, verified facts, recommendations, and limitations.
- Do not use fear to push unnecessary products or actions.
- Review guidance when platforms, standards, or common attack patterns change.
- Correct material errors transparently.
Independence
2FAOTP is not an identity provider and is not affiliated with Google, Microsoft, Apple, Authy, 2FAS, Aegis, or the services discussed in its guides. Product names belong to their respective owners.
Contact
General questions can be sent to hello@example.com. Security reports should follow the separate responsible-disclosure process. Both placeholder addresses must be replaced with monitored mailboxes before launch.