MFA / 2FA for node.js: Speakeasy, otplib

speakeasy - npm

Speakeasy is a one-time passcode generator, ideal for use in two-factor authentication, that supports Google Authenticator and other two-factor devices.

195K downloads/week, MIT license

speakeasyjs/speakeasy: **NOT MAINTAINED** Two-factor authentication for Node.js. One-time passcode generator (HOTP/TOTP) with support for Google Authenticator. @GitHub

How to Implement Multi-Factor Authentication in NodeJS Applications | by Ashokkumar Nandam | Medium

TOTP (Time-Based One-Time Password) is a widely-used algorithm for implementing MFA. It generates a unique one-time password (OTP) for the user, which expires after a short period of time.

javascript - How to add Google Authenticator to my website? - Stack Overflow

otplib - npm

Time-based (TOTP) and HMAC-based (HOTP) One-Time Password library

otplib is a JavaScript One Time Password (OTP) library for OTP generation and verification.

It implements both HOTP - RFC 4226 and TOTP - RFC 6238

393K downloads / week, MIT license