LocalAuth

LocalAuth is an open-source, truly local-first 2FA authenticator. You no longer have to choose between convenience and strong protection: unlock everyday accounts quickly with Face ID, and protect critical assets with either a dedicated YubiKey channel or a generic FIDO hmac-secret channel, using a three-channel security model based on account value.

Key features: • Open source: core logic is transparent and easier to audit • Zero-cloud local 2FA: tokens stay on your device by default • Three-channel tiered security: Face ID / Secure Enclave + YubiKey + generic FIDO hmac-secret • End-to-end encrypted Travel Vault: only connects when you explicitly use it, encrypts backups on-device first, and keeps plaintext tokens unreadable to the server • Fast import: QR scan, screenshot OCR, and manual entry • Google migration compatible: supports otpauth / otpauth-migration • Local device transfer: pairing code + QR over LAN sync • Privacy first: automatic privacy mask when the app goes to the background • Hardware key support list: continuously updated compatibility references

No bloated workflow. No unnecessary account dependency. Built around local data sovereignty. For people who want a calm, trustworthy, and serious authenticator, LocalAuth is built to stay out of the way while keeping control in your hands.

Open-source URL: https://github.com/LocalLens-Project/localauth-ios