I have set up two-factor authentication so that I have to enter the code from the authentication app when logging in to the website. I can click to ensure that I am not asked for it again on this computer for four weeks. However, this does not work. I am asked for the key again every time I log in. What can I do to make this work?
Hey there, can you share more on what browser you using? Are you using strict settings that clears settings when you close the browser etc?
… and/or using a private/incognito window, which doesn’t save it?
Sorry, I should have done that. I’m using Firefox 145.0.2. The cookie settings are on default, so they are not deleted. I just tested it with Brave (1.84.141) as well. Same thing. By the way, Firefox also forgets that I logged in via Bitwarden.eu (instead of .com). I have to reselect that every time too. I don’t use the private window.
@Friedel12 While that does seem to be an issue (what you describe), another general tip: it seems you’re constantly logging in and logging out on the BW browser extension. – The recommended and more convenient thing is, to just lock the extension, and unlock it when you want to use it. (–> “What’s the difference between log in and unlock?”)
For that, you would have to set your vault timeout action to “Lock”. (Settings → Account security → Vault timeout) (and/or if you manually logged out until now, just manually lock the extension)
At the moment, there are two main unlock options (apart from “master password unlock”) that can be set up:
- Unlock With Biometrics | Bitwarden
- Unlock With PIN | Bitwarden
- (and probably relatively near, at least for some client apps: Unlock with passkeys → see this feature request)
(if you need more specific instructions, just ask)
A good way to test if your Firefox profile is a problem is: create a new profile (about:profiles), launch a separate window, and use Bitwarden from there.
- Login with 2FA, remembering for 30 days, this one should give you a Login from new device email notification.
- Logout
- Login (hopefully without the 2FA); this one should NOT give a Login from new device email notification.
If this doesn’t have the same problem, your extensions/settings—especially those related to privacy and security enhancement—may be responsible for deleting the site cookies and data. There can also be programs that delete such data, including CCleaner.
1 Like