Generator/Setup guides/Bitwarden

Bitwarden setup key, and the code it expects

Bitwarden shows the key beside the QR code — but think carefully before storing the vault’s own second factor inside the vault.

Service bitwarden.comAlgorithm SHA-1Step 30sDigits 6
or drop an image here

Advanced
Digits
Period
Algorithm
Waiting for a keypaste one above to start27

——————

Where Bitwarden hides the key

  1. Web vault → Settings → Security → Two-step login.
  2. Next to Authenticator app, click Manage.
  3. The Base32 key sits beside the QR code.
  4. Paste it above and confirm with the six digits.

Do not store this one in BitwardenBitwarden can hold TOTP secrets for other sites, which is fine. Its own second factor is different: keeping it inside the vault it protects collapses two factors into one. Keep this key on paper or in a separate device.

Parameters Bitwarden issues

AlgorithmSHA-1, the RFC 6238 default.
Period30 seconds
Digits6
URI formatotpauth://totp/Bitwarden:you@bitwarden.com?secret=…&issuer=Bitwarden. Paste the whole URI above and the label fills itself in.

If the key is gone

  1. Recovery code from Settings → Security. Print it before you need it.
  2. Nothing else. Bitwarden holds no key material and cannot restore access. This is the point of the design, and the consequence of it.

Questions

Is it safe to keep other sites’ TOTP secrets in Bitwarden?
For most people, yes: an encrypted vault is far better than an unencrypted note. Keep the vault’s own second factor outside it.

Related

TroubleshootingWhy your 2FA code is rejectedSetup guideGitHub setup keySetup guideDiscord setup key