twofas/2fas-server

Self hosting the server

Closed this issue · 4 comments

ln-12 commented

Hey, first of all: 2FAS is an awesome app and I really like using it!

Do you plan to support self hosting the server software? Well, technically this is already possible using this repo but I do not see any way to change the server URL in the apps and browser extension. Is this a planned feature?

2fas-com commented

Thank you!
The app itself doesn't require any server. We're using external server only for additional features like BE and in-app notifications. Tbh we don't have plans for this to be a feature. At least for now.

  • 👎4
  • 😕3
teambvd commented

This somewhat defeats the purpose of the app IMO - if I can't have control over all aspects of my data with 2FAS, then there's limited reason to use it over the various other options out there... I hope this feature can be reconsidered.

CeeBeeEh commented

Wait, does this mean that if I lose my phone or the all the data is wiped I lose all my 2FA tokens? (I'm not talking about backup codes).

I used Authy up until recently as I allowed me to have two places where I could access my 2FA codes; on my phone and my desktop. Since Authy got rid of their desktop app I jumped ship to 2FAS, as it's so far the best open source option. I just installed the browser extension and learned that it doesn't even show the codes, it's just an autofill plugin. I use multiple physical systems as well as remote desktop connections to other systems. So having direct desktop access to the codes is vital for my workflow.

  • 👍1
ibaraki-douji commented

Hey, if you guys are still intrested of deploying your own 2FAS servers i can post a tutorial / steps to set it up on your server since i just did it on mine. Tho if you want to go and change the server be ready to also change the Android/IOS app and the browser extension code as well (to change the API url in both softwares)

@CeeBeeEh to awnser your question, no you will not loose them, the API is here to add icons on the fly, sync your phone with the browser extension, manage notifications, and system reports when there is an error on the phone app. The API will not and will never keep the token in the server.
(for Authy they also keep the token on their server for their backup thing)

  • 👍3