All help topics

Everyday use

How do I keep my two-step sign-in codes in my vault?

Your vault can show the 6-digit codes that some websites ask for, right next to the password. Here is how to add them.

Some websites ask for a 6-digit code as well as your password. This is called two-step sign-in. The code changes every 30 seconds.

Many people get these codes from an app like Google Authenticator. Your vault can make the same codes for you, right next to the password.

Before you start

You need the website's setup code. Most websites show it as a square barcode (a QR code) when you turn on two-step sign-in. They often call it an "authenticator app" option.

  1. Sign in to the website on a computer, if you can.
  2. Go to its security settings.
  3. Choose to turn on two-step sign-in with an authenticator app.
  4. Leave the page with the square code open.

Add the code with your phone

  1. Open the Bitwarden app on your phone and unlock your vault.
  2. Find the login for that website and tap it. If there is none, save a new password first.
  3. Tap Edit.
  4. Find the box called Authenticator key (sometimes "TOTP").
  5. Tap the camera button next to it, and allow the camera if asked.
  6. Point your phone at the square code on the computer screen.
  7. Tap Save.

The website will now ask you to type a 6-digit code to finish. Open the item in your vault, and you will see the code. Type it into the website.

If the website shows a long line of letters instead, you can type or paste those letters into the Authenticator key box.

Using the codes every day

When the website asks for your code:

  1. Open the login in your vault.
  2. Look at the 6-digit code. A small timer shows how long it lasts.
  3. Tap the code to copy it, then paste it into the website.

On a computer, the browser extension often copies the code for you after it fills in your password. Just paste it.

Keep the backup codes

Many websites also show some recovery codes when you turn this on. Write them down or print them. Keep them with your emergency kit.

Your email and your bank are the most important ones to protect this way. We can set these up with you during in-person setup.

If you would like help adding a code, email us at [email protected] or book in-person help.