2FAuth Hosting Live In 5 Minutes

2FAuth hosting gives you a single-user 2FA and TOTP manager that generates your codes in a browser, not only on a phone. Deploy 2FAuth 6.1.3 as a self-hosted 2FA code manager on a server you own: xCloud runs the pinned image, generates the APP_KEY, keeps the SQLite database on a persistent volume and publishes it over HTTPS on your domain, so a replaced phone no longer locks you out.

Deploy your 2FAuth

No terminal
No technical skills needed
No lock-in, cancel anytime

What is 2FAuth?

Self-hosted 2FAuth is a 2FA code manager. Its README calls it a web-based self-hosted alternative to one-time passcode generators like Google Authenticator, for mobile and desktop, that manages your accounts in groups and generates TOTP, HOTP and Steam Guard codes. You add accounts by scanning a QR code or a form, and it is a single-user app protected by sign-in, optional security-key login and data encryption. It is AGPL-3.0 licensed.

On xCloud the template runs the 2fauth/2fauth 6.1.3 image as a single container, with its SQLite database, sessions and logs on the twofauth_data volume. xCloud generates the APP_KEY and publishes the app over HTTPS on your domain. The first account you register is the only user. The image is pinned by tag, and there is no separate database service.

From Sign-Up to a Live 2FAuth In Just 3 Easy Steps

Self-hosting 2FAuth normally means a container, a persistent volume, a domain and a certificate before anything works. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick 2FAuth from the OneClick catalog. Choose a domain and target server; there are no install fields to fill in.
Step 02
We Deploy It For You
One click. We bring up the 2fauth/2fauth 6.1.3 image with a generated APP_KEY, mount the twofauth_data volume for the SQLite database, sessions and logs, and publish it over HTTPS on your domain.
Step 03
Register And Save The Key
Open your domain and click Register: the first account becomes the only user. Then copy the APP_KEY from the site's Environment editor into a password manager, and add your first account by QR code.

Everything 2FAuth Does, On Your Own Server

2FAuth runs in full here, with your authenticator secrets on infrastructure you control.

Codes In A Browser
Generate your TOTP codes from any browser, so a lost or replaced phone does not lock you out of your accounts.
Three Ways To Add Accounts
Scan a QR code, paste an OTPAuth URI, or enter the secret manually from the dashboard.
Passkey Login
WebAuthn sign-in to 2FAuth itself is on by default and tied to your domain, once the site is served over HTTPS.
HTTPS From The Start
Served on your own domain with a certificate issued and renewed for you, not on a shared subdomain.
Backed By A Volume
The SQLite database, sessions and logs live on one persistent named volume that survives a restart.
Single User By Design
2FAuth refuses to create a second user. It is a personal tool, with no team accounts to manage.

Everything You Need To Run Your Service 24/7

Managed hosting for 2FAuth, so the server that keeps it online is not your problem.

2FAuth deployed instantly
Codes from any browser
QR, URI or manual entry
Passkey login
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With 2FAuth

Get codes on a desktop without a phone
Open your own 2FAuth in a browser to read a one-time code, instead of reaching for a phone every time you sign in on a computer.
Keep 2FA accounts in a database you can copy
Store every account in one SQLite database on your server, so replacing a phone is a restore, not a hunt through recovery codes.
Organise accounts into groups
Use groups to sort work, personal and shared-service accounts, and add accounts by QR code, a form or an OTPAuth URI.
Sign in with a security key
Use a hardware key such as a Yubikey for 2FAuth itself and switch off the password login, as the README describes, once the site is on HTTPS.

2FAuth vs Alternatives

Google Authenticator: 2FAuth's README positions it as a web-based, self-hosted alternative to OTP generators like Google Authenticator, with your accounts in a database on your own server you can back up.
Vaultwarden: Vaultwarden is a password manager with its own xCloud template. 2FAuth is dedicated to 2FA codes, so you can keep your second factor in a separate app from your passwords.
Other authenticator apps: 2FAuth is a web-based, self-hosted option for one user: codes come from your own server, and the accounts sit in one SQLite file you back up yourself.
A phone authenticator app: 2FAuth is designed for both mobile and desktop, per its README, and shows codes in any browser you sign in on, at the cost of running and securing a server.

Ready To Own Your Setup?

2FAuth on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own your data. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

How much RAM does 2FAuth need?

Per the manifest the floor is a single core, 256 MB of RAM and 1 GB of disk. The 6 GB Cloud VPS sold on this page sits well above that, so memory is never the limit, and the server has room for other apps if you decide the trade-off is acceptable.

Is 2FAuth free and open source?

Yes. 2FAuth is licensed under the AGPL-3.0, per the LICENSE file at the v6.1.3 tag, and the software itself carries no price. xCloud's charge is for the dedicated Cloud VPS only, and your secrets sit in a SQLite database on your own volume, not with a third party.

Can you run 2FAuth with Docker?

Yes, and this is 2FAuth Docker hosting prepared for you: the template runs the 2fauth/2fauth 6.1.3 image as one container with twofauth_data mounted at /2fauth, a generated APP_KEY and HTTPS in front on your domain. The image is pinned by tag, and there is no separate database.

Can more than one person use 2FAuth?

No. Per the README, you create one user account and it is not possible to create a second one, because the app is made for personal use. The first account registered on your domain becomes the only user, so register straight after install.

Which codes can 2FAuth generate?

TOTP, HOTP and Steam Guard codes, per its README. You can add an account by scanning or decoding a QR code, pasting an OTPAuth URI or filling the advanced form, edit imported accounts, and organise everything in groups from the dashboard.

Does 2FAuth support security keys and passkeys?

Yes. The README says you can sign in with a security key such as a Yubikey or Titan key and disable the traditional login form. WebAuthn is tied to your domain, so it works once the site is served over HTTPS and the domain stays the same.

What is the 2FAuth APP_KEY and why does it matter?

It is generated at deploy and shown in the site's Environment editor. Save it in a password manager. If you turn on per-account secret encryption, losing it makes every stored secret unrecoverable, so keep it with your volume backup rather than only on the server.

What should I back up on a 2FAuth server?

A backup is the twofauth_data volume, which holds the SQLite database, sessions and logs, together with the APP_KEY. If you lose the server, you lose the codes unless you have both. Keep an offline copy of each account's recovery codes too, and test a restore.

Backups in xCloud

Is it safe to keep 2FA codes on a self-hosted server?

It is a trade-off. A server that holds your passwords and your 2FA codes holds more than one factor, so you may prefer to keep 2FAuth on a server of its own. This is a dedicated Cloud VPS, so you decide whether to share it with other apps.

How do I upgrade 2FAuth?

Nothing upgrades it for you: the template pins 6.1.3 by tag. Back up the twofauth_data volume and the APP_KEY, read the upstream release notes, then adopt a newer xCloud template version, and check that you can still generate a code and that passkey sign-in works.

Is this 2FAuth cloud hosting?

It is your own 2FAuth on a dedicated Cloud VPS that xCloud provisions, not a hosted authenticator service. The container, the volume, the APP_KEY and the one user account belong to your install, and the app is served over HTTPS on your domain.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.