My AccountTwo-step Login

Two-step Login via Authenticator

Two-step login using a third-party authenticator app (for example, 2FAS, Ravio, or Aegis) is available for free to all Bitwarden users.

note

Some authenticator apps, such as Google Authenticator, do not automatically backup your 2FA tokens for easy migration to a new mobile device. In these cases, you should manually save each token's authenticator recovery codes.

Other apps, such as Authy, do support backup and sync across devices. In these cases, be sure to set a strong backup password and keep a record of it in your Bitwarden vault.

Setup an authenticator

To enable two-step login using an authenticator app:

warning

Losing access to your two-step login device can permanently lock you out of your vault unless you write down and keep your two-step login recovery code in a safe place or have an alternate two-step login method enabled and available.

Get your recovery code from the Two-step login screen immediately after enabling any method.

  1. Log in to the Bitwarden web app.

  2. Select SettingsSecurity Two-step login from the navigation:

    Two-step login
    Two-step login

  3. Locate the Authenticator App option and select the Manage button:

    Select the Manage button
    Select the Manage button


    You will be prompted to enter your master password to continue.

  4. Scan the QR code with your authenticator app of choice.

    If you don't have an authenticator app on your mobile device yet, download one and scan the QR code. We recommend Authy.

  5. Once scanned, your authenticator app will return a six-digit verification code. Enter the code in the dialog box in your web vault and select the Enable button.

    A green Enabled message will indicate that two-step login via authenticator has been enabled.

  6. Select the Close button and confirm that the Authenticator App option now is enabled, as indicated by a green checkbox ( ).

note

We recommend keeping your active web vault tab open before proceeding to test two-step login in case something was misconfigured. Once you have confirmed it's working, logout of all your Bitwarden apps to require two-step login for each. You will eventually be logged out automatically.

Setup on multiple devices

If your Bitwarden account is used across multiple devices, 2FA can be enabled to work with additional compatible devices. To add 2FA to an additional device, follow the steps above and scan the QR code with your additional device or manually enter the QR key to enable 2FA on the additional device.

Use an authenticator

The following assumes that Authenticator App is your highest-priority enabled method. To access your vault using an authenticator:

  1. Log in to your Bitwarden vault on any app and enter your email address and master password.

    You will be prompted to enter the six-digit verification code from your authenticator app.

  2. Open your authenticator app and find the six-digit verification code for your Bitwarden vault. Enter this code on the vault login screen. Typically, verification codes will change every 30 seconds.

    tip

    Check the Remember Me box to remember your device for 30 days. Remembering your device will mean you won't be required to complete your two-step login step.

  3. Select Continue to finish logging in.

You will not be required to complete your secondary two-step login step to Unlock your vault once logged in. For help configuring log out vs. lock behavior, see vault timeout options.

Make a suggestion to this page

Contact Our Support Team

For technical, billing, and product questions.

Name*
Bitwarden account email*
Verify account email*
Product*
Are you self-hosting?*
Subject*
Message...*

Cloud Status

Check status

© 2024 Bitwarden, Inc. Terms Privacy Cookie Settings Sitemap

This site is available in English.
Go to EnglishStay Here