Integrated Authenticator
Password Manager integrated authentication is an alternative solution to dedicated authentication apps like Bitwarden Authenticator, which you can use to verify your identity for websites and apps that use two-step login. Integrated authentication generates six-digit time-based one-time passwords (TOTPs) using SHA-1 and rotates them every 30 seconds.
note
Storage of keys is available to all accounts, however TOTP code generation requires Premium or membership to a paid organization (Families, Teams, or Enterprise).
If you are new to using TOTPs for two-step login, refer to the Field Guide to Two-step Login for more information.
In Bitwarden Password Manager, you can generate TOTPs using two methods:
From a Bitwarden mobile app or browser extension by scanning a QR code.
From any Bitwarden app by manually entering a secret.
Complete the following steps to set up integrated authentication from your app of choice:
Edit the vault item for which you want to generate TOTPs.
Tap the
Set up TOTP button.Scan the QR code and tap Save to begin generating TOTPs.
Edit the vault item for which you want to generate TOTPs.
Select the
TOTP button, which will scan the authenticator QR code from the current webpage. The full QR code must be visible on-screen.Tap Save once the code has been entered to begin generating TOTPs.
Once set up, integrated authentication will continuously generate six-digit TOTPs rotated every 30 seconds, which you can use as a secondary step for two-step login to connected websites or apps. You can update the TOTP seed at any time using the
icon on the Edit Item screen.Complete the following steps to manually enter a secret key from the iOS or Android app:
Edit the vault item for which you want to generate TOTPs.
Tap the
Set up TOTP button.Tap the Enter Code Manually link at the bottom of the screen.
Paste the secret key into the Authenticator Key field and tap Add TOTP.
Once set up, integrated authentication will continuously generate six-digit TOTPs rotated every 30 seconds, which you can use as a secondary step for two-step login to connected websites or apps. You can edit the TOTP seed at any time using the
icon on the Edit Item screen.tip
TOTPs rely on time-based code generation. If your device has an incorrect time compared to the server, it will generate codes that don't work. If you are having trouble with your TOTP codes, set your device's time and time zone to Automatic.
Bitwarden browser extensions will autofill your TOTP code, unless the Autofill on Page Load option is active. In that case, the browser extension also copies the TOTP code to your clipboard for easy pasting into the form. Mobile applications will only automatically copy the TOTP code to your device's clipboard after autofill.
On browser extensions, you can also copy the TOTP code from the context menu:
tip
Automatic TOTP copying can be turned off on browser extensions using Settings → Options → Copy TOTP automatically, which will be on by default. Additionally, use the nearby Clear clipboard option to set an interval with which to clear copied values.
All Bitwarden apps display your rotating TOTP code inside the vault item, which can be copied and pasted just like a username or password:
Mobile apps also have a dedicated Verification Codes screen that lists active TOTPs for quick copying:
TOTP codes are generated based on the system clock of your device. If your generated codes are not working, the most likely reason is that your device clock has become out-of-step from the Bitwarden server. To re-sync the clock on your device:
Navigate to Start → Settings → Time & language → Date & time, and turn the Set time automatically option off and back on.
If this doesn't work, use the following PowerShell commands to set your timezone, being sure to replace the timezone name with the right one from this list, and restart your computer:
BashSet-TimeZone -Id "Central Standard Time"
BashRestart-Computer
Navigate to System Settings → General → Date & Time, and turn the Set time and date automatically and Set time zone automatically using your currently location options off and back on.
Navigate to Settings → System → Date & time, and turn the Set time automatically option off and back on.
Navigate to Settings → General → Date & Time, and turn the Set Automatically option off and back on.
By default, Bitwarden will generate six-digit TOTPs using SHA-1 and rotate them every 30 seconds, however some websites or services will expect different parameters. Parameters can be customized in Bitwarden by manually editing the otpauth://totp/
URI for your vault item.
Parameter | Description | Values | Sample Query |
---|---|---|---|
Algorithm | Cryptographic algorithm used to generate TOTPs. | -sha1 |
|
Digits | Number of digits in the generated TOTP. | 1-10 |
|
Period | Number of seconds with which to rotate the TOTP. | Must be > 0 |
|
For example:
Bashotpauth://totp/Test:me?secret=JBSWY3DPEHPK3PXP&algorithm=sha256&digits=8&period=60
Learn more about using otpauth://
URIs here.
iOS users running iOS 16+ can set any application as the default for storing verification codes when scanning codes directly from the camera app, including Bitwarden Authenticator and Password Manager integrated authentication. To set this up:
Open the iOS Settings app on your device.
Tap Passwords.
Tap Password Options.
Select an app from the Set Up Codes In dropdown in the Verification Codes section.
By default, Microsoft Azure and Office 365 accounts expect the use of Microsoft Authenticator for TOTPs. If you want to use Bitwarden Password Manager integrated authentication to generate TOTPs for your Microsoft Azure or Office 365 accounts, you'll need to complete the following steps:
In Microsoft, navigate to your account settings page. Depending on whether yours is a personal or business account, this may be
account.microsoft.com
ormyaccount.microsoft.com
.Depending on whether yours is a personal or business account, open your Security dashboard or select Security info. If you're going through the Security dashboard, you'll need to also select Two-step verification from that screen.
Select either the Two-step verification Turn on button or Add sign-in method button and choose Authenticator app from the dropdown.
During the setup procedure, you'll see a dropdown menu for the verification method. Select Authenticator App or An app.
Proceed until you see a blue "different authenticator app" hyperlink. Select the hyperlink when you see it.
Continue until you see a QR code, at which point you can follow the normal instructions here.
The Bitwarden Authenticator (TOTP) can be used as an alternative means of TOTP generation for Steam using a steam://
prefix followed by your secret key:
Generated steam://
TOTPs are by default alphanumeric and five digits, as opposed to traditional six-digit numeric TOTPs.
warning
To use this functionality, you will need to manually extract your Steam account's secret using a third-party tool. There are tools such as SteamTimeIdler and Steam Desktop Authenticator that can help you accomplish this, however such extraction tools are not officially supported by Bitwarden or Steam. Use these tools at your own risk.
Suggest changes to this page
How can we improve this page for you?
For technical, billing, and product questions, please contact support