For an enterprise account, is a user’s My Vault accessible by the Enterprise owners or admins?
The short answer is “no”.
1 Like
Thank you very much. I appreaciate the fast reply.
A slightly longer answer:
You need to take into account that depending on how your organization has set up Bitwarden policies your account might be enrolled into account recovery without you being able to opt out of it.
In that case, an owner or admin could change the master password for your account and use it to access your vault.
If that was done without your knowledge/consent, you would notice it because you would lose access to your own account.
1 Like
To follow up on this, it would also depend on if the administrator controlled both account recovery and 2FA through the identity provider, as account recovery does not bypass 2FA.
1 Like