Private. Offline. Yours.
StuAuth is a local TOTP/HOTP authenticator designed for users who want full control over their secrets.
No cloud. No forced synchronization. No user account. No telemetry.
Everything stays on your devices.
Most modern authenticator applications rely on cloud services, automatic synchronization, or third-party accounts.
StuAuth takes the opposite approach:
- Local-only storage
- Offline code generation
- Manual backups
- Optional LAN synchronization
- No dependency on external providers
You own your data.
- TOTP (RFC 6238)
- HOTP support
- Offline code generation
- Automatic code refresh
- Folder-based organization
- Rename folders and accounts
- Manual Base32 secret entry
- Lightweight and simple interface
- Import from
otpauth://URIs - Import from text files
- QR Code scanning
- Direct screen QR capture
- Google Authenticator Migration QR import
- Text export
- PNG QR Code export
- Manual account backups
- Built-in local HTTP server
- Synchronization between devices on the same network
- LAN host discovery
- No remote services
- AES‑256‑GCM encryption
- PBKDF2‑HMAC‑SHA256 key derivation
- Random salt generation
- Random IV generation
- Optional master password
- Secure memory wiping for sensitive secrets
- System Tray support
- Quick lock / unlock
- Single-instance protection
- Time synchronization support
- 🇫🇷 French
- 🇬🇧 English
- 🏴 Breton
- 🇯🇵 Japanese
Data is stored locally in an encrypted file.
When a master password is enabled:
- Data is protected using AES‑256‑GCM
- Encryption keys are derived using PBKDF2‑HMAC‑SHA256
- Passwords are never stored in plain text
When no master password is configured:
- A local device-specific key is generated automatically.
StuAuth is not a password manager.
It is designed specifically for storing and managing OTP secrets locally.
StuAuth can share accounts between trusted devices on the same local network.
Port used:
19755/TCP
Never expose this port directly to the Internet.
The synchronization feature is intended for trusted local networks only.
👉 Download:
- Visual Studio 2022
- Qt 6.10+
- CMake
- OpenSSL
- Inno Setup (optional)
- WSL + AlmaLinux (for Linux AppImage build)
.\Build.ps1 all_secure_dynamic StuAuthAvailable targets:
all_static
all_secure_static
all_dynamic
all_secure_dynamic
Example:
.\Build.ps1 all_secure_dynamic StuAuthThis will:
- Build the Windows version
- Deploy Qt runtime files
- Generate the installer
- Build the Linux AppImage
- Package everything into the Deploy folder
An Android version built with .NET MAUI is also available.
👉 Download:
- Offline OTP generation
- Local synchronization with StuAuth Desktop
- Google Authenticator import
- Local account storage
A Firefox extension is also available.
👉 Download:
- Quick access to OTP codes
- Fully local operation
- Compatible with StuAuth exports
- No cloud dependency
StuAuth is intentionally simple.
Project goals:
✅ Offline First
✅ No Cloud
✅ No Telemetry
✅ User Controlled Backups
✅ Lightweight
✅ Open Source
Built primarily for personal use and shared publicly as-is.
MIT License
You are free to:
- Use
- Modify
- Redistribute
- Integrate into your own projects
No warranty provided.
Possible future features:
- WebAuthn / Passkeys support
- Portable encrypted backups
- End-to-end encrypted synchronization
- Webcam QR scanner
- Instant account search
- Custom themes
Spiritecho
If you find this project useful:
⭐ Star the repository
🍴 Fork it
🐛 Report bugs
💡 Suggest improvements
Your OTPs. Your Device. Your Control.