multiotp/multiotp-open-source repository overview

⁠multiOTP open source

multiOTP open source is a GNU LGPL implementation of a strong two-factor authentication PHP class
multiOTP open source is OATH certified for HOTP/TOTP

(c) 2010-2026 SysCo systemes de communication sa
https://www.multiotp.net/⁠

Current build: 5.10.2.2 (2026-04-03)

Binary download: https://download.multiotp.net/⁠ (including virtual appliance image, docker and full release notes)

Docker container available: docker run -v path/to/multiotp/data:/etc/multiotp -v path/to/freeradius/config:/etc/freeradius -v path/to/multiotp/log:/var/log/multiotp -v path/to/freeradius/log:/var/log/freeradius -p 80:80 -p 443:443 -p 1812:1812/udp -p 1813:1813/udp -d multiotp/multiotp-open-source

Docker volumes
PATH/TO/MULTIOTP/DATA/VOLUME:/etc/multiotp
PATH/TO/FREERADIUS/CONFIG/VOLUME:/etc/freeradius
PATH/TO/MULTIOTP/LOG/VOLUME:/var/log/multiotp
PATH/TO/FREERADIUS/LOG/VOLUME:/var/log/freeradius

The multiotp/multiotp-open-source docker is working on Synology devices !

It's strongly recommended to read the whole README file.
That said, if you're in a hurry: the default RADIUS secret for subnet 0.0.0.0/0 is myfirstpass.

Binary download of the multiOTP open source Credential Provider for Windows 7/8/8.1/10/11/2012(R2)/2016/2019/2022 : https://download.multiotp.net/credential-provider/⁠

Please consider supporting this project by making a donation via PayPal⁠

Visit http://forum.multiotp.net/⁠ for additional support.

The multiOTP package is the lightest package available that provides so many strong authentication functionalities and goodies, and best of all, for anyone that is interested about security issues, it's a fully open source solution!

This package is the result of a bunch of work. If you are happy using this package, [Donation] are always welcome to support this project. Please check https://www.multiotp.net/⁠ and you will find the magic button ;-)

If you need some specific features in the open source edition of multiOTP, please contact us in order to discuss about a sponsorship in order to prioritize your needs.

You can also have a look on on https://www.multiOTP.com⁠ for multiOTP Pro and multiOTP Enterprise, which are commercial editions of ready to use virtual appliances including more features like:

• Full Web GUI interface
• Automated provisioning of new account (based on Active Directory)
• High Availability master-slave support (Enterprise Edition)
• Push token using free multiOTP token App (Enterprise Edition)
• Web API support (Enterprise Edition)
• free virtual appliances available, including a free lifetime one user licence
• online demo of the full Web GUI interface
• ...

The multiOTP class supports currently the following algorithms and RFC's:

• OATH/HOTP or OATH/TOTP, base32/hex/raw seed, QRcode provisioning (multiOTP token App, FreeOTP, Google Authenticator, ...)
• Yubico OTP (http://yubico.com/yubikey⁠)
• mOTP (http://motp.sourceforge.net⁠)
• SMS tokens with various providers (including on-premises solutions)
• TAN (emergency scratch passwords)
• RFC1994 CHAP (Challenge Handshake Authentication Protocol)
• RFC2433 MS-CHAP (Microsoft PPP CHAP Extensions)
• RFC2487 SMTP Service Extension for Secure SMTP over TLS
• RFC2759 MS-CHAPv2 (Microsoft PPP CHAP Extensions, Version 2)
• RFC2821 SMTP (Simple Mail Transfer Protocol)
• RFC4226 OATH/HOTP (HOTP: An HMAC-Based One-Time Password Algorithm)
• RFC5424 Syslog Protocol (client)
• RFC6030 PSKC (Additional Portable Symmetric Key Container Algorithm Profiles)
• RFC6238 OATH/TOTP (TOTP: Time-Based One-Time Password Algorithm)

This package was initially published here : http://syscoal.users.phpclasses.org/package/6373.html⁠ For more PHP classes, have a look on PHPclasses.org⁠, where a lot of authors are sharing their classes for free.