* Send Staging (#447) * - js for in-page tabs - send category early drafts of articles - send images * fix scrolling on tab * send web vault * mobile image * redone 'receive send' article * send from browser ext & mobile * send work * improvements to 'about' * send additions * so much send * lotsa send * all send all the time * ain't nothin but a send thang * cli * send cli * simple cli sends in /create-send/ * simple disable & delete in /send-lifespan/ * send desktop screenshots * send final cleanup * cli final cleanup * send edits * fix * send final touches * fixed links & non-send updates * new import message documentation, several import articles condensed to use tabs, U2F support for Edge, excluded domains article, remove in innacurate note on emergency accesss * Firefox Attachment Workflow + Date Picker for custom timestamps * safari attach file Send req * excluded domains addition * fix tab titles * release notes * unlock articles * link to status feed * small typos * test * updated release notes * lastpass article form fill rewrites * import to org & personal clarifications * send self-hosting, safari web extension edits, and release notes
5.8 KiB
layout, title, categories, featured, popular, tags, order
| layout | title | categories | featured | popular | tags | order | |||
|---|---|---|---|---|---|---|---|---|---|
| article | Unlock with PIN |
|
false | false |
|
10 |
Bitwarden can be configured to accept a Personal Identification Number (PIN) as a method to unlock your Vault.
PINs can only be used to unlock your Vault, you will still be required to use your Master Password and any enabled [Two-step Login method]({% link _articles/two-step-login/setup-two-step-login.md %}) when you log in. If you're not sure of the difference, scroll down to Understanding Unlock vs. Log In.
Enable Unlock with PIN
Unlock with PIN can be enabled for Bitwarden Browser Extensions, Desktop, and Mobile:
Enable for Browser Extension
To enable Unlock with PIN for your Browser Extension:
-
Open the {% icon fa-cogs %} Settings tab.
-
Scroll down to the Security section and check the Unlock with PIN checkbox.
-
Enter the desired PIN code in the input box. Your PIN can be any combination of characters (a-z, 0-9, $, #, etc.).
{% callout success %}The pre-checked option Lock with master password on browser restart will require you to enter your Master Password instead of the PIN when your browser restarts. If you want the ability to unlock with a PIN even when the browser restarts, uncheck the option.{% endcallout %}
Your Unlock with PIN settings will persist until you log out. When you log out of your Browser Extension, you'll need to re-enable Unlock with PIN. {% endcapture %} {{ browser_extension | markdownify}}
Enable for Desktop
To enable Unlock with PIN for your Desktop app:
-
Open your Settings (on Windows, File → Settings) (on macOS, Bitwarden → Preferences).
-
Scroll down to the Security section and check the Unlock with PIN checkbox.
-
Enter the desired PIN code in the input box. Your PIN can be any combination of characters (a-z, 0-9, $, #, etc.).
{% callout success %}The pre-checked option Lock with master password on restart will require you to enter your Master Password instea of the PIN when the app restarts. If you want the ability to unlock with a PIN when the app restarts, uncheck this option.{% endcallout %}
Your Unlock with PIN settings will persist until you log out. When you log out of your Desktop App, you'll need to re-enable Unlock with PIN. {% endcapture %} {{ desktop_info | markdownify}}
Enable for Mobile
To enable Unlock with PIN for your Mobile app:
-
Open the {% icon fa-cogs %} Settings tab.
-
Scroll down to the Security section and tap the Unlock with PIN Code option.
-
Enter the the desired PIN code in the input box. Your PIN can be any combination of characters (a-z, 0-9, $, #, etc.).
{% callout success %}A dialog box will appear asking whether you want to require unlocking with your master password when the application is restarted. Tap Yes to require your Master Password instead of PIN when the app restarts. Tap No for the ability to unlock with the PIN when the app restarts.{% endcallout %}
Your Unlock with PIN settings will persist until you log out. When you log out of your Mobile App, you'll need to re-enable Unlock with PIN. {% endcapture %} {{ mobile_info | markdownify}}
Understanding Unlock vs. Log In
In order to understand why unlocking and logging in aren't the same, it's important to remember that Bitwarden [never stores unencrypted data]({% link _articles/security/vault-data.md %}) on its servers. When your Vault is neither unlocked nor logged in, your Vault data only exists on the server in its [encrypted form]({% link _articles/security/what-encryption-is-used.md %}).
Logging in to Bitwarden decrypts your Vault data to your device. In practice, that means two things:
- Logging in will always require your Master Password, because your Master Password is the source of the key needed to decrypt your Vault data. Additionally, because decryption is an operation that needs to be protected, this stage is where [any enabled Two-step Login methods]({% link _articles/two-step-login/setup-two-step-login.md %}) would be required.
- Logging in will always require you to be connected to the internet (or, if you're self-hosting, connected to the server), because you need access to the encrypted Vault in order to decrypt it.
Unlocking can only be done when you're already logged in. In other words, only when your Vault data is already decrypted to your device. Because your Vault is already decrypted:
- You don't need the decryption key derived from your Master Password, so you're free to use other access methods, like [PIN codes]({% link _articles/account/unlock-with-pin.md %}) and [biometrics]({% link _articles/account/biometrics.md %}).
- You don't need to be connected to the internet (or, if you're self-hosting, connected to the server).