Adding more security to Bitwarden user accounts | Bitwarden Blog
bitwarden.com
Bitwarden is bolstering user account security for logins from unrecognized devices. Learn more about what triggers the new verification process and who is affected.

Bitwarden users who store their email account credentials within their Bitwarden vaults would have trouble accessing the sent codes if they are unable to log in to their email.

To prevent getting locked out of your vault, be sure you can access the email associated with your Bitwarden account so you can access the emailed codes, or turn on any form of two-step login to not be subject to this process altogether.

  • Giooschi@lemmy.worldEnglish
    2·
    1 day ago

    You keep the recovery codes unexposed to the internet or obfuscated in some way, unlike your usual password.

    How is a strong password I used exclusively for Bitwarden “exposed to the internet”? I do see the value of this for people that don’t care about security and reuse the same password everywhere. In that case you would need something like phishing to expose the 2FA code or the recovery code, just a leak of the email-password combination from another website would not be enough. But what’s the point if I’m already using a unique strong password specifically for Bitwarden?