About LinOTP
LinOTP is an open source solution for two-factor authentication (2FA). It is designed for enterprise-level strong authentication and is available under AGPLv3 and GPLv2 licenses. The software provides a modular design for flexible integration into existing setups.
LinOTP includes management interfaces for token and policy-based rights management. Its policy framework allows administrators to control who can log in, when, and where, and which token must be used. The system also features a signed audit log for tamper-proof recording of authentications and management actions.
Key features
- Open source under AGPLv3 and GPLv2
- Modular design for flexible integration
- Management interfaces for token and policy control
- Policy framework for user and access rules
- Signed audit log for tamper-proof logging
- Supports Pushtoken and Offline OTP Authentication
Good fit for
- Enterprise two-factor authentication
- Strong authentication for existing systems
LinOTP: questions and answers
- What is LinOTP used for?
- LinOTP is an open source two-factor authentication solution with enterprise-level features. It is a good fit for enterprise two-factor authentication and strong authentication for existing systems.
- Is LinOTP open source?
- Yes. LinOTP is open source under the AGPL-3.0 licence. Its source code is on GitHub at LinOTP/LinOTP and is written mainly in Python.
- Is LinOTP free?
- Yes. LinOTP is open source, so the software itself is free to use. A managed cloud version is also available.
- Can I self-host LinOTP?
- Yes. LinOTP can be self-hosted on your own server or infrastructure.
- What is LinOTP an alternative to?
- LinOTP is an open-source alternative to Duo Security. Other open-source alternatives to Duo Security include Authelia, privacyIDEA and Keycloak.
- Is LinOTP actively maintained?
- Yes. The most recent commit to LinOTP was on 13 October 2026. The project has 550 stars on GitHub.
Open-source alternatives to LinOTP
See all
Authelia
Auth & Identity
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cr
Apache-2.0vs OneLogin★ 29k
privacyIDEA
Auth & Identity
:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)
AGPL-3.0vs Duo Security★ 1.8k
Keycloak
Auth & Identity
Open Source Identity and Access Management For Modern Applications and Services
Apache-2.0vs Auth0★ 37k
Authentik
Auth & Identity
The authentication glue you need.
OSSvs Auth0★ 26k
Aegis Authenticator
Auth & Identity
A free, secure and open source app for Android to manage your 2-step verification tokens.
GPL-3.0vs Microsoft Authenticator★ 13k
Ravada
Open source
Remote Virtual Desktops Manager
AGPL-3.0vs Duo Security★ 652
SaaS alternatives to LinOTP
See all
Duo Security
Auth & Identity
Cisco's multi-factor authentication and device trust service for workforces
SaaSGoogle Authenticator
Auth & Identity
Two-factor authentication app from Google that generates one-time codes
SaaS
Authsignal
Auth & Identity
Step-up authentication and passkey APIs for fraud-resistant logins
SaaS
Beyond Identity
Auth & Identity
Phishing-resistant passwordless MFA with device trust checks
SaaS
Corbado
Auth & Identity
Passkey platform that adds passkey login on top of existing identity systems
SaaS
HYPR
Auth & Identity
Passwordless and phishing-resistant MFA for workforce and customers
SaaS

