Did you know you can use the standalone Bitwarden Authenticator app on newer macs?

[dwbit]

Bitwarden Authenticator | Bitwarden

• Yes
• No
• Not sure

[Nail1684]

… seems like that product site doesn’t know that either

[OpSec]

I haven’t looked at this at all. Is this product ZERO KNOWLEDGE encrypted from top to bottom?

[Nail1684]

@OpSec

Is this product ZERO KNOWLEDGE encrypted from top to bottom?

It seems, at least when you store the TOTP codes locally, then they are not stored encrypted - therefore I opened this feature request a while ago: Option to encrypt the locally stored data of the Authenticator app on the device

[dwbit]

EDIT: Removed, team is updating the product page.

[grb]

@dwbit

Local encryption: All authenticator entries, including the secret keys that generate your codes, are encrypted with AES-256 before being stored.

This seems to be contradictory to the information published in the Help Center’s Authenticator FAQ, which still states that “Your authentication keys (sometimes referred to as ‘secret keys’ or ‘TOTP seeds’) and all associated metadata are stored in a local unencrypted database on your device.” [emphasis added]

[dwbit]

Thanks for flagging, we will update the product page accordingly.

[Nail1684]

… following this discussion: the sync function doesn’t seem to work when the authenticator app is used on MacOS. Is it planned to make that available also?

[dwbit]

Currently the Bitwarden Authenticator mobile app is able to run on macOS due to how the OS works, but is not yet verified for it. Will be sure to update if that changes.