Things Not Covered<\/h3>\n
I won’t cover web browser plugin configuration here, as I’m not a big fan of most web plugins. Many have security issues that are due to the framework under the app, and not the app itself. Feel free to use it if you wish, I’m not saying it’s all bad.<\/p>\n
First Things First: Two-factor Authentication<\/h3>\n
These instructions assume you have a two-factor authentication app on your phone. What is two-factor authentication, you say? Well, it combines your passphrase (you’re using a phrase, right?) and a one-time password or verification code for logging in to sites. It means that even if someone knows your password, they aren’t getting into your account unless they also have your pre-configured authentication app with the token\/code that it presents. You can also have the code sent to your email if you’d like, but if your email isn’t protected with two-factor authentication, I wouldn’t bother. Don’t be frightened by this, be excited that you have one more layer of security on your account. In actual terms, it means your login will consist of the following:<\/p>\n
- \n
- Entering your username<\/li>\n
- Entering your password<\/li>\n
- Being prompted for the verification code, which you’ll get from the two-factor app on your phone or an email that was sent to you. This two-factor code is easily copied and pasted if you’re logging in on your phone, and it’s only a 6-digit code to enter in otherwise.\n
Tip: If you’re using fingerprint authentication on your mobile app, you won’t be prompted for any of this!<\/p>\n<\/li>\n<\/ol>\n
Two-factor authentication isn’t specific to Bitwarden, and if you aren’t using it already, I would HIGHLY recommend using it on any site or app that supports it, including Gmail and the like. If you want assistance, let me know.<\/p>\n
Is it required<\/strong> that you use it with Bitwarden? No, it’s not. However, remember again that this is where ALL of your important information is saved, so why not take one more step to protect it as much as you can?<\/p>\n
Installing a Two-factor Authentication Mobile App<\/h4>\n
I personally don’t care which two-factor app you use, they’re all similar and perform the same action. I use 2Fas Auth<\/a>, which has both Android and iOS versions, and I’ve never had any problems. Bitwarden came out with their own Bitwarden Authenticator<\/a> that offers both platforms, and there’s a slew of others. I’d say just install 2Fas Auth by searching for it in your app store. No further configuration should be needed, and we’ll use it in the steps below (see how painless that was?).<\/p>\n
Initial Bitwarden Sign Up<\/h3>\n
Initial configuration will be done through a web browser, whether that’s on your computer or on your phone (the experience should be the same).<\/p>\n
- \n
- Go to https:\/\/bw.tadzplace.com<\/a><\/li>\n
- You should be presented with the Bitwarden login screen. Click “Create Account” in the lower-right corner:
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/1_login_screen.png?resize=150%2C150&ssl=1\")
NOTE:\u00a0 If you receive a warning saying that creation of accounts isn’t supported, that means that I’ve blocked new user creation.\u00a0 Let me know that you need to create and account and I’ll open the ability for a short time.<\/li>\n- On the next screen, fill in all fields appropriately. Remember that a phrase is much more secure than a password in almost all cases, and a heck of a lot easier to remember. Throw in a number and some special characters and you will have yourself a nearly uncrackable (within reason) master password. The password is protecting all your other information, so choose one accordingly, but please don’t make it so complicated that you’ll forget it or write it on a Post-It! note somewhere (yikes!)
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/2_create_account.png?resize=190%2C300&ssl=1\")
<\/li>\n- Click “Submit” and you should be told your account was created, congratulations!
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/3_account_created_confirm.png?resize=300%2C76&ssl=1\")
<\/li>\n- Now log in with your email and master password, which should be successful. If it’s not, and you can’t get past this step, tell me and I’ll delete your account to start over (I cannot find out your current password or reset it).\u00a0 You can also have it give you your hint via email, if you’d like.<\/li>\n
- Now we want to verify your account so we know everything is kosher. Click “Send Email” in the upper-right portion of the screen:
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/4_verify_email.png?resize=297%2C240&ssl=1\")
<\/li>\n- A confirmation will pop up:
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/5_check_your_email.png?resize=300%2C73&ssl=1\")
<\/li>\n- Go to your email (hey, set up two-factor authentication there too, while you’re at it!) and you should find an email from bw [at] tadzplace.com asking you to verify your account:
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/6_click_verify_email.png?resize=300%2C90&ssl=1\")
<\/li>\n- Click “Verify Email Address Now” in the email. It is entirely possible that you may receive a security warning at this point. It is perfectly safe to proceed to the site, the warning has to do with how my configuration is on the site regarding added security (oddly enough), and I can’t find a way to get rid of it.<\/li>\n
- You will be sent back to the site and be told you’re account is now verified:\n
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/7_email_is_verified.png?resize=300%2C63&ssl=1\")
<\/p>\n<\/li>\n- Log back in, or switch to the tab\/window that is already logged in, to reach the Bitwarden main page<\/li>\n
- Now we’ll configure two-factor authentication.\u00a0 This is my last plea to you in order to configure this.\u00a0 It’s optional, but it really shouldn’t be.\u00a0 Do it, you’ll feel better about yourself and the choices you’ve made in your life (or something like that!)
Click the little user icon in the upper-right hand corner, and select “My Account” from the menu:\n![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/10_my_account.png?resize=240%2C300&ssl=1\")
<\/p>\n<\/li>\n- Under the “Settings” menu on the left of the screen, select “Two-step Login”:\n
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/11_two_step_login.png?resize=256%2C300&ssl=1\")
<\/p>\n<\/li>\n- In Providers<\/strong> section, click “Manage” for “Authenticator App”:\n
![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/12a_manage_authenticator_app.png?resize=300%2C46&ssl=1\")
The screen will display a scan code (it’s removed for security purposes below):<\/p>\n![\"\"](\"https:\/\/i0.wp.com\/www.tadzplace.com\/wordpress\/wp-content\/uploads\/2019\/01\/12b_scan_code_enter_verification.png?resize=226%2C300&ssl=1\")
<\/p>\n<\/li>\n- Grab your phone with the newly-installed authenticator app, and open the app<\/li>\n
- In 2Fas, click the plus (+) symbol, point your camera at the QR code on your screen.\u00a0 It should take a picture of the QR code and add an entry to 2Fas<\/li>\n
- Enter the 6-digit code from 2Fas into Bitwarden at the bottom of the window and click “Enable”
At this time you’ll need your username, password, and authenticator app to log into Bitwarden securely the first go-around, or when you’ve chosen to fully log out of the mobile or desktop app.\u00a0 But what happens if you drop your phone and run over it with your car?\u00a0 Hold that thought, and read on…..<\/li>\n- You’ll be brought back to the Two-step Login screen.\u00a0 Click “View Recovery Code”, which will present you with a code that can be used to gain access to your account (along with your username in password) in lieu of the authenticator app.\u00a0 Save this to a known location on your computer, print it out and put it in your safe or similar.\u00a0 No, this isn’t the same as a Post-It! note, as you still need your username and password in addition to this, but you should still not put it on your bulletin board and treat it like very private information!<\/li>\n<\/ol>\n
Congratulations!\u00a0 You now have your Bitwarden account configured, and can use the web interface any time that you want.\u00a0 If you want to configure a mobile<\/a> or desktop<\/a> app there are instructions for that!<\/p>\n\n\n
Continue to Mobile App Setup >><\/a><\/p>\n\n\n\n
- You should be presented with the Bitwarden login screen. Click “Create Account” in the lower-right corner:
- Go to https:\/\/bw.tadzplace.com<\/a><\/li>\n