Integrated Authenticator

Password Manager integrated authentication is an alternative solution to dedicated authentication apps like Bitwarden Authenticator, which you can use to verify your identity for websites and apps that use two-step login. Integrated authentication generates six-digit time-based one-time passwords (TOTPs) using SHA-1 and rotates them every 30 seconds.

If you are new to using TOTPs for two-step login, refer to the Field Guide to Two-step Login for more information.

In Bitwarden Password Manager, you can generate TOTPs using two methods:

• From a Bitwarden mobile app or browser extension by scanning a QR code.

• From any Bitwarden app by manually entering a secret.

Complete the following steps to set up integrated authentication from your app of choice:

Once set up, integrated authentication will continuously generate six-digit TOTPs rotated every 30 seconds, which you can use as a secondary step for two-step login to connected websites or apps. You can update the TOTP seed at any time using the  icon on the Edit Item screen.

Complete the following steps to manually enter a secret key from the iOS or Android app:

1. Edit the vault item for which you want to generate TOTPs.

2. Tap the  Set up TOTP button.

3. Tap the Enter Code Manually link at the bottom of the screen.

4. Paste the secret key into the Authenticator Key field and tap Add TOTP.

Once set up, integrated authentication will continuously generate six-digit TOTPs rotated every 30 seconds, which you can use as a secondary step for two-step login to connected websites or apps. You can edit the TOTP seed at any time using the  icon on the Edit Item screen.

Bitwarden browser extensions will autofill your TOTP code, unless the Autofill on page load option is active. In that case, the browser extension also copies the TOTP code to your clipboard for easy pasting into the form. Mobile applications will only automatically copy the TOTP code to your device's clipboard after autofill.

On browser extensions, you can also copy the TOTP code from the context menu:

All Bitwarden apps display your rotating TOTP code inside the vault item, which can be copied and pasted just like a username or password:

Mobile apps also have a dedicated Verification Codes screen that lists active TOTPs for quick copying:

TOTP codes are generated based on the system clock of your device. If your generated codes are not working, the most likely reason is that your device clock has become out-of-step from the Bitwarden server. To re-sync the clock on your device:

BashCopy
Set-TimeZone -Id "Central Standard Time"

BashCopy
Restart-Computer

By default, Bitwarden will generate six-digit TOTPs using SHA-1 and rotate them every 30 seconds, however some websites or services will expect different parameters. Parameters can be customized in Bitwarden by manually editing the otpauth://totp/ URI for your vault item.

For example:

BashCopy
otpauth://totp/Test:me?secret=JBSWY3DPEHPK3PXP&algorithm=sha256&digits=8&period=60

Learn more about using otpauth:// URIs here.

iOS users running iOS 16+ can set any application as the default for storing verification codes when scanning codes directly from the camera app, including Bitwarden Authenticator and Password Manager integrated authentication. To set this up:

1. Open the iOS Settings app on your device.

2. Tap Passwords.

3. Tap Password Options.

4. Select an app from the Set Up Codes In dropdown in the Verification Codes section.

By default, Microsoft Azure and Office 365 accounts expect the use of Microsoft Authenticator for TOTPs. If you want to use Bitwarden Password Manager integrated authentication to generate TOTPs for your Microsoft Azure or Office 365 accounts, you'll need to complete the following steps:

1. In Microsoft, navigate to your account settings page. Depending on whether yours is a personal or business account, this may be account.microsoft.com or myaccount.microsoft.com.

2. Depending on whether yours is a personal or business account, open your Security dashboard or select Security info. If you're going through the Security dashboard, you'll need to also select Two-step verification from that screen.

   

3. Select either the Two-step verification Turn on button or Add sign-in method button and choose Authenticator app from the dropdown.

4. During the setup procedure, you'll see a dropdown menu for the verification method. Select Authenticator App or An app.

5. Proceed until you see a blue "different authenticator app" hyperlink. Select the hyperlink when you see it.

6. Continue until you see a QR code, at which point you can follow the normal instructions here.

The Bitwarden Authenticator (TOTP) can be used as an alternative means of TOTP generation for Steam using a steam:// prefix followed by your secret key:

Generated steam:// TOTPs are by default alphanumeric and five digits, as opposed to traditional six-digit numeric TOTPs.