Important notice: Bitwarden will send a code to your account email to verify logins from new devices starting in February 2025.

[pzauner]

Code Contribution Proposal

While I do understand the intentions for better account security I want the possibility to neither enable 2FA nor have to confirm my login via mail.

In case of an emergency, the loss of all devices on hand, etc. I want to be able to login to my Bitwarden-Account to have access to all my other accounts. If this access is blocked you could be stranded somewhere, without your phone, not even being able to login to your webmail in some internet café or hotel.

This isn't about the 99.9% of cases where I have the option for my TOTP 2FA or mailaccount as I am already logged in, it is about the worst possible scenario and the feeling of not having lost all actionabilty.

[pzauner]

Related:

• New Device Login Protection (February 2025)
• Discussion in Forum

Seems like there will be an option to opt out of this, though it isn't recommended.

Who is excluded from this account email-based new device verification?
The following categories of logins are excluded:

• Users who have two-step login set up are excluded.
• Users who log in with SSO, a passkey, or with an API key are excluded.
• Self-hosted users are excluded.
• Users who log in from a device where they have previously logged in are excluded.
• Users who opt-out from their account settings, to which an option will be added, are excluded (Not recommended).