New Update Bitwarden makes it harder to hack password vaults without MFA

Gandalf_The_Grey

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Forum Veteran
Apr 24, 2016
7,750
6
81,461
8,389
54
The Netherlands
Open-source password manager Bitwarden is adding an extra layer of security for accounts that are not protected by two-factor authentication, requiring email verification before allowing access to accounts.

When a potentially suspicious login attempt is detected, like from an unrecognized device, the user will now prompted to confirm the action by entering a verification code they received via email.

Those who fail to provide the code cannot access the password vault.

"Starting in February, Bitwarden will bolster user account security for those users who are not utilizing two-step login (2FA) for their Bitwarden account," reads the announcement.

"When logging in from an unrecognized device, users will be asked for an emailed verification code to confirm the login attempt and better protect their Bitwarden vaults."
 
  • Like
Reactions: simmerskool
Definitely, there will be fewer people, not using 2FA, with their vaults breached. Possibly, there will be people who are locked out of their accounts because of some conditions that weren't before.
 
  • Like
Reactions: Gandalf_The_Grey