Two-step Login via Authenticator
Two-step login using a third-party authenticator app (for example, Bitwarden Authenticator) is available for free to all Bitwarden users.
note
Some authenticator apps do not automatically backup your 2FA tokens for easy migration to a new mobile device. In these cases, you should manually save each token's authenticator recovery codes. See Recovery codes for additional information to safely store and use recovery codes.
Apps such as Authy and Google Authenticator, do support backup and sync across devices. In these cases, be sure to set a strong backup password and keep a record of it in your Bitwarden vault.
To enable two-step login using an authenticator app:
warning
Losing access to your two-step login device can permanently lock you out of your vault unless you write down and keep your two-step login recovery code in a safe place or have an alternate two-step login method enabled and available.
Get your recovery code from the Two-step login screen immediately after enabling any method. Additionally, users may create a Bitwarden export to backup vault data.
Log in to the Bitwarden web app.
Select Settings → Security → Two-step login from the navigation:
Two-step login Locate the Authenticator App option and select the Manage button:
Select the Manage button
You will be prompted to enter your master password to continue.Scan the QR code with your authenticator app of choice.
If you don't have an authenticator app on your mobile device yet, download one like Bitwarden Authenticator and scan the QR code.
Once scanned, your authenticator app will return a six-digit verification code. Enter the code in the dialog box in your web vault and select the Enable button.
A green
Enabledmessage will indicate that two-step login via authenticator has been enabled.Select the Close button and confirm that the Authenticator App option now is enabled, as indicated by a green checkbox ( ).
note
We recommend keeping your active web vault tab open before proceeding to test two-step login in case something was misconfigured. Once you have confirmed it's working, logout of all your Bitwarden apps to require two-step login for each. You will eventually be logged out automatically.
Bitwarden two-step login can be made to work with multiple compatible devices. To add 2FA to an additional device, follow the steps above and scan the QR code with your additional device or manually enter the QR key to enable 2FA on the additional device. This can also be done to setup two-step login for multiple authenticators on a single device.
The following assumes that Authenticator App is your highest-priority enabled method. To access your vault using an authenticator:
Log in to your Bitwarden vault on any app and enter your email address and master password.
You will be prompted to enter the six-digit verification code from your authenticator app.
Open your authenticator app and find the six-digit verification code for your Bitwarden vault. Enter this code on the vault login screen. Typically, verification codes will change every 30 seconds.
tip
Check the Remember Me box to remember your device for 30 days. Remembering your device will mean you won't be required to complete your two-step login step.
Select Continue to finish logging in.
You will not be required to complete your secondary two-step login step to Unlock your vault once logged in. For help configuring log out vs. lock behavior, see vault timeout options.
Suggest changes to this page
How can we improve this page for you?
For technical, billing, and product questions, please contact support