[SOLVED] How to setup Duo Push for a personal use?

I tried to follow the guide but it does not contain info on the duo push.
So far I was able to add Duo as SMS 2FA, but there are limits on the credits and the whole idea was to be able to login by clicking approve on my phone. (Similar to Lastpass authenticator).
I searched YT and Bitwarden Community but could not find any useful info.

Duo Push works when I login to admin panel, but not when I try to authenticate bitwarden.

Haven’t taken a look at it since I activated it about 2 years ago. I will (at least I intent to) do this later today and feed back.

1 Like

Oh my, why did I make this promise? Ok, let’s try this.

First my assumptions: You…

  • already signed up at Login - Duo
  • are signed in
  • have verified your phone number
  • have installed the Duo Mobile app on your smartphone. For Android you can find it here.

So this is my starting point.
As I do not want to mess up my current account I went a little detour. Something - I assume - you will not have to do (for now): I just added a new administrator so that I would be able to see what you should see and that is something like this; just with your name and eMail-address:

Click onto your name and scroll down, then you should see this:

Click onto Activate and you get:

Now start Duo Mobile on your phone. Tap onto the + in the top right corner and scan this QR code.

In your browser click onto save changes and you are done.

1 Like

Some more ideas:

  • Have at least a 2nd completely different 2FA method to log into Bitwarden (like Yubikey and/or TOTP).
  • Test ALL 2FA methods before you rely on them
  • Create a 2nd administrator account inside Duo that points to a completely different eMail-address.
  • Test all admin-credentials for Duo.
1 Like

Thank you very much for your help. It is not fixed but you went into a lot of trouble to help me out.
Based on the screenshot you provided I have all those things set up.
The thing that does not work is only Bitwarden verification.
This is what login for admin looks like:

and this is the screen I get when I try to login to bitwarden:


It does not ask me about Push.

I have reverified Duo Push, as before it works for admin, but not for the bitwarden.

Oops, I missed that part. So here is the rest:

  • You will need 2 windows (perhaps even 3 if you want to keep on reading this) in your browser. Arrange them next to each other.
  • In one log into Login - Duo (D)
  • In the other log into https://vault.bitwarden.com (B)
  • (B) Go to Settings → Two-step Login
  • (B) Look for Duo and click onto Manage
  • (B) Enter your Master Password
  • (B) There is a new form that asks for the Integration key, the Secret key and the *API hostname
  • (D) On the sidebar on the left go to Applications
  • (D) Click onto Protect an Application
  • (D) Find Bitwarden and click onto Protect
  • (D) You will see fields with the Integration key, the Secret key and the API hostname.
  • (D->B) Copy the data into the form in the Bitwarden vault.
  • (B) Click onto Enable
  • (B) Click Close
  • (D) Click onto Save
    Done!

Make sure to have another working 2FA method for Bitwarden!
Open another window; this time in private/incognito mode.
Go to https://vault.bitwarden.com
Log in and when asked select Duo for 2FA.

1 Like

@Peter_H
I did all of that as seen on those screenshots:

and vault:
image

I left the last 3 char so you can see both are the same.

For me it looks the same:

image

I even had removed Bitwarden from Duo and then added it again. And for me it works (Phew!).

From here on it is just guessing.
What I would do now is this:
Remove Bitwarden from Duo and Duo from Bitwarden then start from scratch.

1 Like

I think we fix it.
I deleted a user (I thought admin could not be a user so I had user with the same email and phone).
Now that it is gone, I got a set up window when I tried to login and I was able to add account.
The Duo Push WORKS.

Thank you very much!

1 Like

Welcome to the secret society of Duo users :wink:

2 Likes

I did the detailed walkthrough twice, and DUO is still “waiting for an update”.
Anyone has another idea?
Or another DUO-like service that will complete Bitwarden with a similar Lastpass-like experience?

I found this thread having problems getting Duo Push working with bitwarden, and Jakub’s response was really the opposite of what I found (or maybe I just didn’t understand his comment). Wheras Jakub is saying he needed to delete an account, I had been deleting what I thought was a duplicate account and you can’t do that.

To be clear, Duo requires multiple user accounts which I did not understand until finding the below thread on the Duo forums.

There is a Duo account for your Duo Admin Panel login and those codes only work for the Duo Admin Panel. You need to have additional Duo accounts for different apps, I thought that you only needed a single account and I had been deleting the duplicate accounts.

So within the Duo app, you can rename the accounts, or just know that the one that has “Admin” in the name is not the one to use for BW.

In addition, in the Duo Policy setup, you need to make sure under Authenticators → Authentication methods that Duo Push and/or Duo Passcodes are enabled. I also disabled “SMS passcodes” as the Duo app has been working great.