Bitwarden users who store their email account credentials within their Bitwarden vaults would have trouble accessing the sent codes if they are unable to log in to their email.

To prevent getting locked out of your vault, be sure you can access the email associated with your Bitwarden account so you can access the emailed codes, or turn on any form of two-step login to not be subject to this process altogether.

  • @9tr6gyp3
    link
    English
    82 days ago

    Where do you store your 2FA recovery codes?

    • Fushuan [he/him]
      link
      fedilink
      English
      3
      edit-2
      1 day ago

      On my home PC. Same with the 2fa export of aegis.

      “What if you can’t access blah”

      There’s a limit to interoperability, if you want access to everything everywhere even when you lose access for whatever reason, you will have to concede security.

      You could save a keepass file with secure notes of both the bitwarden 2fa and recovery codes and save it in drive or whatever, you don’t need passwords nowadays to access the Google account.

      “But what if I lose access to my phone?”

      Well you are fucked, what else do you want? I guess you could print the recovery keys and store them in a secured box at home.

      Edit: I read further down that your comment was meant to incite other to actually think and do stuff. Sorry if I came of rude.

      • @9tr6gyp3
        link
        English
        72 days ago

        Well thats a good way to lock yourself out of your account!

        • Engywuck
          link
          fedilink
          English
          142 days ago

          Well, not really. Vault is cached on your devices, so if you have it unlocked or available on one of them you can always use it to check your 2FA.

          By the way, it was a joke. I also use Aegis as a backup.

    • @acosmichippo
      link
      English
      4
      edit-2
      2 days ago

      two places:

      \1. secure location in your home (physical copy in a safe or a digital copy on an encrypted disk)

      \2. in case of a disaster like a home fire where you lose the 2FA device and local backup: in a remote location such as an encrypted file in a cloud service or at a trusted friend/family’s house.

      • @9tr6gyp3
        link
        English
        52 days ago

        I know the recommendations. Im suggesting that everyone take a look at those practices and be sure to have them implemented.

        If you’re not printing out the codes on paper and sticking them in a safe deposit box as a remote backup, you’re absolutely risking it.

        • @acosmichippo
          link
          English
          12 days ago

          ok, sorry for answering what appeared to be a genuine question.

          • @9tr6gyp3
            link
            English
            12 days ago

            Nah you hit the nail on the head. I 100% agree with you. Sorry if I came off brash.