Since your Password Manager stores all your logins, we highly recommend that you secure it with Two-step Login. In this article we’ll discuss using both Authy and PassageWay’s Built-in Authenticator for Two-step Login. There are a variety of Two-step Login solutions you can use to verify your identity after logging in to a website with a PassageWay Vault item. Enabling Two-step Login will require you to complete a secondary step each time you Log In, in addition to entering your Master Password. PassageWay supports a variety of Two-step Login methods that you can use to secure Vault data.

Security often involves a tradeoff between protection and convenience, so ultimately it’s up to you! Generally, the two most critical ways to use Two-step Login are: Looking for a token from a physical security key (for example, Yubikey).Asking for a token generated by an Authenticator app (for example, Authy) on your mobile device.Sending a token in an SMS / Text message to the mobile device on-file.

Without physical access to the token from your Secondary Device, a malicious actor would be unable to access the Website, even if they discover your Username and Password: Basic Two-step Login flowĬommonly, websites or apps with sensitive data (for example, your online bank account) will attempt verify your identity outside of the login screen by:

Websites that use Two-Step Login will require you to verify your identity by entering an additional “token” (also called Verification Code or One-time Password (OTP)) besides Username and Password, typically retrieved from a different device. Two-step Login (also called Two-factor Authentication or 2FA) is an increasingly common security technique used by websites and apps to protect your sensitive data.

Bitwarden google authenticator