Open two-step login settings
- Sign in to the Bitwarden web app for your server region.
- Open Settings → Security → Two-step login.
- Choose Manage beside Authenticator App and confirm your master password.
Add Bitwarden to Sign In
You can use Sign In, our authenticator app for codes on your iPhone.
- With the setup QR code on another screen, open Sign In and tap Add → Scan QR Code.
- Scan the code, review the account details, and tap Add Account.
- Enter the current six-digit code in Bitwarden, choose Enable, then Close. Check that the method is marked enabled.
Bitwarden displays a key for manual setup alongside its QR code. In Sign In, choose Add → Enter Setup Key, set Service to Bitwarden and Account to your account name, paste the secret into Key, then tap Add Account. Keep this key private.
Save the recovery code immediately
From Two-step login, choose View recovery code and confirm your master password. Store the code securely outside your phone and vault.
If your authenticator becomes unavailable, use Bitwarden’s recovery page for the correct US, EU, or self-hosted server. It requires your email, master password, and recovery code. Recovery deactivates your personal two-step methods; set up protection again and save the replacement recovery code.
Organization access and remembered devices
An organization-managed verification prompt may still apply after recovery. If your organization requires two-step login, recovery can remove your membership until you re-enable protection and an administrator restores access.
An already signed-in vault can unlock without a new code. Remembered devices can also skip the code prompt temporarily.
If a code does not work
Make sure the Bitwarden entry in Sign In matches the account you are using. Wait for a fresh code, then enter it before it changes. If fresh codes keep failing, check that your iPhone uses automatic date and time.
Keep a working sign-in session and your recovery information available while resolving the problem. Adding an entry to Sign In does not finish enrollment: the service must accept a code and confirm activation.