Migrate from Bitwarden Authenticator to TwoFac

Understanding Your Bitwarden Setup

Bitwarden has two places where your 2FA codes might live:

• Standalone App: The mobile-only Bitwarden Authenticator app.
• Password Manager Vault: The integrated authenticator inside your Bitwarden password manager (Premium feature).

Option A: Exporting from the Standalone App

If you only have codes stored locally in the Bitwarden Authenticator app:

1. Open the Bitwarden Authenticator app on your mobile device.
2. Tap the Settings (gear) icon.
3. Tap Export.
4. Select your preferred File format (JSON is recommended).
5. Tap Export items and save the file to your device.

Note: If you use the "Sync with Bitwarden" feature, your codes are in your main vault instead. Use Option B below.

Option B: Exporting from the Bitwarden Password Manager

If your 2FA codes are synced inside your Bitwarden Password Manager vault:

1. Log in to the Bitwarden Web Vault or Desktop app.
2. Go to Tools → Export Vault.
3. Select .json as the format. This is the most reliable format for preserving TOTP seeds (the field is named totp).
4. Enter your master password to confirm and download the JSON file.

Step 2: Import into TwoFac

Because Bitwarden exports may contain full password vault data (if you used Option B), TwoFac does not natively ingest Bitwarden's entire password JSON schema out-of-the-box. The safest way to migrate is manually mapping your TOTP seeds, or using the standalone app's otpauth:// strings.

1. Open the exported JSON file on a secure, offline computer.
2. Locate the totp fields (or otpauth:// URIs) for each of your accounts.
3. Open TwoFac and click Add Account.
4. Manually paste the secret seeds or the otpauth:// URIs to securely add each account.

Security Warning: The exported JSON file contains your 2FA secrets (and potentially your passwords!) in plain text. Once you have successfully imported your secrets into TwoFac, permanently delete the export file.

Step 3: Secure Your New Setup

Keep your 2FA codes separated from your password manager for maximum security:

• Delete the unencrypted export file from your computer and empty the trash.
• Enable Biometric Unlock in TwoFac to protect your codes.
• Create an Encrypted Backup: Generate an encrypted backup directly from TwoFac so that your future backups are secured with a passkey.

Step 4: Clean up or Keep Both

Once you have verified that your codes are generating correctly in TwoFac, you can uninstall Bitwarden Authenticator if you wish. Because exporting simply copies your secrets without re-registering them, you can also continue to use both authenticator apps simultaneously!