Recovery Code for Two-Step Login

Bitwarden provides a unique recovery code when you activate any

. If you

lose your authentication device

, use this code to disconnect all two-step login methods and regain access to your account. If you lose both your recovery code and two-step device, like a phone with an authenticator app or linked email inbox, you may be locked out of your vault.

Save your recovery code immediately after turning on any two-step login method and store it in the secure location of your choice. A printed copy kept in a safe place is a good option, because it prevents digital theft and accidental deletion.



note

After

using a recovery code

, a new one is generated. Make sure to save the updated code. Adding new two-step login methods or changing your master password does not impact the recovery code.

To find your recovery code in the Bitwarden web app:

1. After setting up at least one two-step login method, go to Settings → Security.

2. Select Two-step login.

3. Select View recovery code:
   

   

4. Enter your master password and select Continue. Your recovery code will appear:
   

   

To regain access to your account with its recovery code:

1. Go to the recovery page for your account's

   server location
   :

   • United States:

     https://vault.bitwarden.com/#/recover-2fa/

   • European Union:

     https://vault.bitwarden.eu/#/recover-2fa/

   • Self-hosting: https://your.domain.com/#/recover-2fa/

2. Enter your email address, master password, and recovery code.

3. Select Submit.

Once your account details and recovery code are authenticated, you'll be logged in to your vault and all previously set up two-step login methods will be deactivated.



note

Recovery codes will not deactivate Duo for organizations. If you are locked out of your vault by an organizational Duo prompt, reach out to the Duo administrator at your company for help bypassing the prompt.

If you're not sure whether the Duo prompt is setup personally or by your organization, try selecting Use another two-step login method.

To maintain secure and reliable access to your account afterwards:

• Set up or reactivate at least one

  two-step login method
  . If you don’t, Bitwarden will send a
  verification code
  to your account email when you log in from an unrecognized device.

• Save your new recovery code
  , because it changes after being used.

When you’re an Enterprise organization member, what happens after you submit a valid recovery code may differ.

If your organization

but does not

require two-step login

, you will be directed to the SSO login page. Use your SSO credentials to log in and access your Bitwarden vault.

If your organization

, successfully using the recovery code will remove you from the organization. To rejoin the organization once you’re logged in:

1. Set up a new

   two-step login method
   .

2. If your organization also

   requires single sign-on authentication
   , reconnect your SSO credentials to your Bitwarden account.

3. Ask an admin or owner to

   restore your account
   within the organization.