# speakeasyjs/speakeasy

**NOT MAINTAINED** Two-factor authentication for Node.js. One-time passcode generator (HOTP/TOTP) with support for Google Authenticator.

Repository: https://github.com/speakeasyjs/speakeasy
Canonical: https://ross.abutalabs.com/products/speakeasy
Language: JavaScript
License: MIT
License Family: permissive
Topics: javascript, two-factor, two-factor-authentication, node, nodejs, node-js, mfa, hotp, totp, multi-factor
Last push: 2023-09-11T09:33:09+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 5417, "days_push": 1087, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2757, forks 225 (observed 2026-08-28T04:07:18.245625+00:00)

## What it is
Speakeasy is a Node.js one-time passcode generator implementing HOTP (RFC 4226) and TOTP (RFC 6238) for two-factor authentication, compatible with Google Authenticator and similar apps. It supports custom token lengths, hash algorithms like SHA256/SHA512, and includes secret key generation helpers.

## Use cases
- add two-factor authentication to a node.js app
- generate TOTP codes compatible with Google Authenticator
- generate HOTP one-time passwords in JavaScript
- generate secret keys and otpauth QR URLs for 2FA enrollment
- verify user 2FA tokens with configurable windows and hash algorithms

## When to choose
- you need a well-tested, MIT-licensed HOTP/TOTP library for an existing Node.js codebase
- you need custom token lengths, SHA256/SHA512 support, or secret generation helpers

## When to avoid
- you are starting a new project - the project is explicitly NOT MAINTAINED; prefer an actively maintained alternative like otplib
- you need guaranteed security patches or long-term support

## Facets
- artifact type: library
- maturity: abandoned
- function: auth, security, cryptography
- domain: security, backend, developer-tools
- platform: -
- tags: totp, hotp, two-factor-authentication, google-authenticator, one-time-password, mfa, unmaintained, nodejs, javascript

## Member repositories
- speakeasyjs/speakeasy (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:18.245625+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T08:18:49.418700+00:00, confidence not recorded.
  - readme: https://github.com/speakeasyjs/speakeasy (fetched 2026-08-28T04:07:18.245625+00:00, sha 91ea64420bab)
  - registry_npm: https://registry.npmjs.org/speakeasy (fetched 2026-08-29T09:56:52.390216+00:00, sha aa16d034083f)
- Data as of 2026-08-30T08:39:29.467469+00:00.