Adding MFA to Bitwarden#
This guide will show you how to add multi-factor authentication (MFA) to your Bitwarden account. If you need more help, you can check out the official Bitwarden documentation (they call it two-step login).
The two recommended ways are via email or an authenticator app. If you are more tech savvy, I would recommend jumping straight to the authenticator app guide. This way is much more secure. If you do not want to deal with another app, you can just use email, just know that it is less secure (but still better than nothing).
Via Email#
The easiest, but least secure, way to add MFA is via email. This is still better than no MFA at all, so definitely still do this if you are uncomfortable with an app. Bitwarden has a helpful guide, or you can follow the steps below.
First, make sure you are logged into Bitwarden in your browser. Once you are logged in, on the left side of the screen, you should click Settings, then Security, and finally Two-step Login:
Under Providers, you should see Email. Click on Manage and type in your master password. Once you have done that, you should see a screen like this:
Type in the email you want to use. When in doubt, just use the same email you use to log into Bitwarden. Click Send Email and then go check your email. You should see a 6-digit TOTP code that you should then copy and paste into the second box. Then you can click Turn on and you are all set!
Via an Authenticator App#
You may already be familiar with authenticator apps, like Google Authenticator, Authy, or Duo Mobile. Bitwarden supports this method, and it is more secure than email. If you do not have an authenticator app, I would personally recommend Bitwarden Authenticator, or Duo Mobile. Both are free, and have easy backups if you have an iPhone with iCloud. To set up Bitwarden and your authenticator app, you can follow the official Bitwarden guide, or you can follow the steps below.
First, make sure you are logged into Bitwarden in your browser. Once you are logged in, on the left side of the screen, you should click Settings, then Security, and finally Two-step Login:
Under Providers, you should see Authenticator App. Click on Manage and type in your master password. Once you have done that, you should see a screen with a QR code. On your phone authenticator app, you should be able to scan the QR code (there should be a button to do this, usually a +).
Once you have finished setting up on your phone, it should have generated a 6-digit TOTP code. Type that code into the box in your browser, and click Turn on. You are all set!