Approve a Trusted Device
When a member of your organization logs into a new device, they'll need to approve, or trust, that device. One method for doing so, done by selecting the Request admin approval option, involves sending a device approval request to admins and owners within the organization for approval.
To approve a request, as an organization admin, or owner, or custom user with the Manage account recovery permission:
Log in to the Bitwarden web app and open the Admin Console using the product switcher:
Product switcher Select Settings → Device approvals from the navigation.
Using the options menu, select Approve request.
Approve device request note
When a member requests device approval, a fingerprint phrase is displayed on the member's device. Additional verification can be performed by checking that this fingerprint phrase matches the one shown in the member column. This method is optional and requires synchronous communication between the requesting member and the administrator.
Multiple device requests may be approved at one time using the top level options menu and selecting Approve all requests.
warning
Bulk device approval using the Approve all requests option may neglect verification steps that administrators can perform to ensure a request is legitimate, such as checking the user's reported fingerprint phrase.
Bitwarden recommends that significant security controls such as IdP credential standards, IdP MFA, and IdP device registration and trust be reviewed before enabling and using bulk device approval.
When a device request is approved, the requesting user is sent an email informing them they can continue logging in on that device. The user must take action by logging in to the new device within 12 hours, or the approval will expire.
Unapproved requests will expire after 1 week. You can deny a login attempt by instead selecting Deny request, or deny all existing requests by selecting the top-most options menu and selecting Deny all requests.
Events are logged when:
A user requests a device approval.
A device request is approved.
A device request is denied.
Suggest changes to this page
How can we improve this page for you?
For technical, billing, and product questions, please contact support