Two-step Login via Authenticator
Two-step login using a third-party authenticator app (for example, Authy, Google Authenticator, or FreeOTP) is available for free to all Bitwarden users.
Some authenticator apps, such as Google Authenticator, do not automatically backup your 2FA tokens for easy migration to a new mobile device. In these cases, you should manually save each token's authenticator recovery codes.
Other apps, such as Authy, do support backup and sync across devices. In these cases, be sure to set a strong backup password and keep a record of it in your Bitwarden vault.
To enable two-step login using an authenticator app:
Losing access to your two-step login device can permanently lock you out of your vault unless you write down and keep your two-step login recovery code in a safe place or have an alternate two-step login method enabled and available.
Get your recovery code from the Two-step login screen immediately after enabling any method.
Log in to your web vault.
Select the profile icon and choose Account Settings from the dropdown:
Select the Security page and the Two-step Login tab:
Locate the Authenticator App option and select the Manage button:
You will be prompted to enter your master password to continue.
Scan the QR code with your authenticator app of choice.
If you don't have an authenticator app on your mobile device yet, download one and scan the QR code. We recommend Authy.
Once scanned, your authenticator app will return a six-digit verification code. Enter the code in the dialog box in your web vault and select the Enable button.
Enabledmessage will indicate that two-step login via authenticator has been enabled.
Select the Close button and confirm that the Authenticator App option now is enabled, as indicated by a green checkbox ( ).
We recommend keeping your active web vault tab open before proceeding to test two-step login in case something was misconfigured. Once you have confirmed it's working, logout of all your Bitwarden apps to require two-step login for each. You will eventually be logged out automatically.
If your Bitwarden account is used across multiple devices, 2FA can be enabled to work with additional compatible devices. To add 2FA to an additional device, follow the steps above and scan the QR code with your additional device or manually enter the QR key to enable 2FA on the additional device.
The following assumes that Authenticator App is your highest-priority enabled method. To access your vault using an authenticator:
Log in to your Bitwarden vault on any app and enter your email address and master password.
You will be prompted to enter the six-digit verification code from your authenticator app.
Open your authenticator app and find the six-digit verification code for your Bitwarden vault. Enter this code on the vault login screen. Typically, verification codes will change every 30 seconds.
Check the Remember Me box to remember your device for 30 days. Remembering your device will mean you won't be required to complete your two-step login step.
Select Continue to finish logging in.
You will not be required to complete your secondary two-step login step to Unlock your vault once logged in. For help configuring log out vs. lock behavior, see vault timeout options.