Can I use Bitwarden two-step login without a phone?

Yes. Bitwarden suggests an app on your phone, such as its own Bitwarden Authenticator, but all it checks is the six-digit code, and any standard authenticator produces it. The Authenticator extension reads the QR code off the web app and generates the codes in Chrome.

Should I keep my Bitwarden code inside Bitwarden?

Not this one. Bitwarden can hold codes for your other sites, but the code that opens Bitwarden itself has to live somewhere you can reach while you are signed out of it — a separate authenticator such as this extension, plus the recovery code on paper.

Will Bitwarden ask for a code every time?

No. Check “Remember me” at the prompt and that device skips two-step login for 30 days. Unlocking a vault you are already signed in to needs only your master password.

Why does Bitwarden say my code is wrong?

Usually the QR code changed: if the setup was opened again, Bitwarden made a new one, and the account you added first no longer matches. Add the QR code that is on the screen now and type its code in straight away. If you have two entries for Bitwarden, use the newest.

Bitwarden Authenticator App — Set Up Two-Step Login (2FA)

Your Bitwarden vault holds every other password you have. A leaked master password — typed into a phishing page, say — would hand over all of them at once. With two-step login on, signing in to the vault on a new device also needs the code from your authenticator. Keep that code outside Bitwarden itself: a code stored in the vault it protects is locked away exactly when you need it.

Turn on two-step login in Bitwarden

Sign in to the Bitwarden web app in Chrome on your computer.
Select “Settings” → “Security” → “Two-step login” from the navigation.
Select “Manage” on the “Authenticator App” line and enter your master password when asked.
Bitwarden shows a QR code and a key: leave this tab open and add the QR code to the extension as described below.
Enter the six-digit code from the extension and select “Enable”. A green “Enabled” message confirms it; select “Close”.

Bitwarden’s own instructions

Add Bitwarden to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Bitwarden page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Bitwarden and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Bitwarden confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Bitwarden’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Save your Bitwarden recovery code

Right after enabling, get your recovery code from the “Two-step login” screen and keep it somewhere safe, away from this computer — on paper is fine. Bitwarden warns that losing your two-step login device without it can lock you out of your vault permanently. The recovery code turns off two-step login so you can sign in and set it up again.

The code is not accepted?

Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.

Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Can I use Bitwarden two-step login without a phone?: Yes. Bitwarden suggests an app on your phone, such as its own Bitwarden Authenticator, but all it checks is the six-digit code, and any standard authenticator produces it. The Authenticator extension reads the QR code off the web app and generates the codes in Chrome.
Should I keep my Bitwarden code inside Bitwarden?: Not this one. Bitwarden can hold codes for your other sites, but the code that opens Bitwarden itself has to live somewhere you can reach while you are signed out of it — a separate authenticator such as this extension, plus the recovery code on paper.
Will Bitwarden ask for a code every time?: No. Check “Remember me” at the prompt and that device skips two-step login for 30 days. Unlocking a vault you are already signed in to needs only your master password.
Why does Bitwarden say my code is wrong?: Usually the QR code changed: if the setup was opened again, Bitwarden made a new one, and the account you added first no longer matches. Add the QR code that is on the screen now and type its code in straight away. If you have two entries for Bitwarden, use the newest.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.