How to avoid catch-22 with password managers

Questions
1

With recent change of Bitwarden requiring email 2fa now, I’m stuck on how should I setup my passwords in a way that doesn’t lock me out of accounts if I were to use a new device.

Previously, my setup was just remembering my Bitwarden password, with all my emails and stuff stored in it as that’s what was advertised to me at the time; to only remember one, strong password. But now, I need to remember my email password, and 2fa for that email so that I don’t lock myself out of my digital life. Any suggestions on what should I do here?

Physical notes are not possible as they’re likely to get lost during frequent travels. I was thinking of perhaps using Standard Notes 2fa feature for Bitwarden and creating the account just for that on separate email using family invite. That way I’ve to remember only two passwords which I think is somewhat doable, not really though but I can’t really thinking of anything else.

1 Like
2

You’re not required to use email 2FA. You have the option to 2FA with an authenticator app or with a security key.

1 Like
3

I keep KeepassDX installed which contains the password and 2FA for ProtonPass. I use the same passphrase for Proton and KeepassDX to make it easier to remember. Keepass doesn’t have network access so I think the risk of reusing the passphrase is fairly low.

4

Like @WhinyHamletPayer already said, you don’t need to use email 2FA for Bitwarden if you use either authenticator app or security keys, which you really should do because both are more secure options than email. But whatever you decide, make sure to also create an emergency kit that ensures that you can always access your passwords even if you have forgotten your master password.

3 Likes