* Send Staging (#447) * - js for in-page tabs - send category early drafts of articles - send images * fix scrolling on tab * send web vault * mobile image * redone 'receive send' article * send from browser ext & mobile * send work * improvements to 'about' * send additions * so much send * lotsa send * all send all the time * ain't nothin but a send thang * cli * send cli * simple cli sends in /create-send/ * simple disable & delete in /send-lifespan/ * send desktop screenshots * send final cleanup * cli final cleanup * send edits * fix * send final touches * fixed links & non-send updates * new import message documentation, several import articles condensed to use tabs, U2F support for Edge, excluded domains article, remove in innacurate note on emergency accesss * Firefox Attachment Workflow + Date Picker for custom timestamps * safari attach file Send req * excluded domains addition * fix tab titles * release notes * unlock articles * link to status feed * small typos * test * updated release notes * lastpass article form fill rewrites * import to org & personal clarifications * send self-hosting, safari web extension edits, and release notes
3.6 KiB
layout, title, categories, featured, popular, tags, order
| layout | title | categories | featured | popular | tags | order | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| article | Two-step Login via FIDO U2F |
|
false | false |
|
07 |
Two-step Login using FIDO U2F{:target="_blank"} is available for Premium users, including members of Paid Organizations (Families, Teams, or Enterprise).
Any FIDO U2F certified device can be used, including YubiKeys, SoloKeys, Google Titan, Nitrokeys, and more.
{% callout info %} FIDO U2F cannot be used on all Bitwarden applications. Enable another Two-step Login method in order to access your vault on unsupported applications.
Supported applications:
- Web Vault on a computer with a U2F-enabled Browser (Chrome, Opera, Vivaldi, Edge, or Firefox with FIDO U2F enabled{:target="_blank"}).
- Browser Extensions for a U2F-enabled Browser (Chrome, Opera, Vivaldi, Edge, or Firefox with FIDO U2F enabled{:target="_blank"}). {% endcallout %}
Setup FIDO U2F
Complete the following steps to enable Two-step Login using FIDO U2F:
{% callout warning %} Losing access to your FIDO U2F device can permanently lock you out of your Vault, unless you write down and keep your Two-step Login Recovery Code in a safe place or have an alternate Two-step Login method enabled and available.
[Get Your Recovery Code]({% link _articles/two-step-login/two-step-recovery-code.md %}) from the Two-step Login screen immediately after enabling any method. {% endcallout %}
-
Log in to the Web Vault{:target="_blank"}.
-
Select Settings from the top navigation bar.
-
Select Two-step Login from the left-side menu.
-
Locate the FIDO U2F Security Key option and select the Manage button.
{% image two-step/twostep-options-u2foverlay.png Select the Manage button %}
You will be prompted to enter your Master Password to continue.
-
Give your security key a friendly Name.
-
Plug the security key into your computer's USB port and select Read Key.
If your security key has a button, touch it.
-
Select Save. A green
Enabledmessage will indicate that Two-step Login using FIDO U2F has been successfully enabled and your key will appear with a green checkbox ( {% icon fa-check %} ). -
Select the Close button and confirm that the FIDO U2F Security Key option is now enabled, as indicated by a green checkbox ( {% icon fa-check %} ).
Repeat this process to add up to 5 FIDO U2F security keys to your account.
{% callout info %} When you setup Two-step Login, you should logout of all your Bitwarden apps to immediately activate Two-step Login for each app. You will eventually be logged out automatically. {% endcallout %}
Use FIDO U2F
The following assumes that FIDO U2F is your highest-priority enabled method. Complete the following steps to access your Vault using Two-step Login:
-
Log in to your Bitwarden Vault (Web Vault or Browser Extension) and enter your Email Address and Master Password.
You will be prompted to insert your security key into your computer's USB port. If it has a button, touch it.
{% image two-step/u2f/web.png %}
You will not be required to complete your secondary Two-step Login setup to Unlock your Vault once logged in. For help configuring Log Out vs. Lock behavior, see [Vault Timeout Options]({% link _articles/account/vault-timeout.md %}).