It’s a debated issue but personally I don’t recommend it. Two-step Login Methods Using two-step login (also called two-factor authentication, or 2FA) to protect your Bitwarden vault prevents a malicious actor from accessing your data even if they discover your master password by requiring authentication from a secondary device when you log in. There’s also the option of keeping your TOTP seeds on Bitwarden and having it generate your codes (premium account required). It’s not a bad option though and my next choice after Authy. Microsoft Authenticator isn't bad but I've got some concerns over privacy and security behind Microsoft in general. Some say it has changed now, but don't take the chance when there are so many alternatives out there that have been great for years. It has a bad history of locking you out completely if you lose your device ( 1, 2, 3). Whatever you do though, do not use Google Authenticator. There is a github workaround for being able to export your Authy TOTP seeds but it takes a few steps. You'll find lots of options out there, but unfortunately nothing that is open source, cross-platform, and lets you export seeds. Make sure to save the so-called recovery- or backup-code whenever you activate 2FA. If that is not possible try a copy-paste of the secret code webpages give you directly into the Bitwarden app/extension. OTP Auth - iOS only, lets you export TOTP seeds. Use the mobile app for Bitwarden to scan the QR-code. This is my top suggestion for most people.Īegis - Android only, lets you export TOTP seeds.

No authenticator does everything though which really sucks.Īuthy - Cross platform, backs up to the cloud, great support. My suggestion moving forward with an authenticator is no matter what program you choose, make sure you've got a way to have a plaintext version of all of your TOTP seeds.

Bitwarden totp not working