Enabling 2fa on bitwarden.com overwrites vaultwarden 2fa key #1513

New Issue

MrUnknownDE · 2026-04-06T01:58:58+02:00

MrUnknownDE commented

2026-04-06 01:58:58 +02:00

Originally created by @freekvh on 8/2/2023

Subject of the issue

Enabling 2fa on bitwarden.com overwrites vaultwarden 2fa key in MS authenticator

Deployment environment

vaultwarden version:

Install method:
Clients used:
Reverse proxy and version:
MySQL/MariaDB or PostgreSQL version:
Other relevant details:

Steps to reproduce

I went to bitwarden.com where I have the same account as in vaultwarden, I enabled 2fa and used MS authenticator to import the key via QR code. There was a warning that it would overwrite or update a key? I didn't think much of it because I may have experimented with bitwarden in the past. But afterwards I found that my vaultwarden key was gone.

Expected behaviour

Making a new TOTP for bitwarden.com leaves my vaultwarden TOTP untouched

Actual behaviour

Bitwarden.com key overwrites vaultwarden TOTP key.

Troubleshooting data

I thought 2fa was at least domain dependent, but apparently some things are exactly the same between vaultwarden and bitwarden.com. Maybe this is obvious to some, but it isn't to me.

*Originally created by @freekvh on 8/2/2023*   ### Subject of the issue Enabling 2fa on bitwarden.com overwrites vaultwarden 2fa key in MS authenticator ### Deployment environment     * vaultwarden version:  * Install method: * Clients used:  * Reverse proxy and version:  * MySQL/MariaDB or PostgreSQL version:  * Other relevant details: ### Steps to reproduce I went to bitwarden.com where I have the same account as in vaultwarden, I enabled 2fa and used MS authenticator to import the key via QR code. There was a warning that it would overwrite or update a key? I didn't think much of it because I may have experimented with bitwarden in the past. But afterwards I found that my vaultwarden key was gone. ### Expected behaviour Making a new TOTP for bitwarden.com leaves my vaultwarden TOTP untouched ### Actual behaviour Bitwarden.com key overwrites vaultwarden TOTP key. ### Troubleshooting data I thought 2fa was at least domain dependent, but apparently some things are exactly the same between vaultwarden and bitwarden.com. Maybe this is obvious to some, but it isn't to me.

MrUnknownDE closed this issue

2026-04-06 01:58:58 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1513