(It’s also possible for you to display the key in text form in case you’re unable to scan a QR code). Some password vaults have taken steps to make this a little easier. Thus, two factors are required to sign in: Your ability to enter the correct code at the correct time proves you are in possession of your second factor: your phone.

It’s not random it’s the result of an encryption algorithm involving the secret key. The authenticator application displays a random-looking number that changes every 30 seconds.

The process is simple: you set up two-factor by pairing your smartphone with your account, usually by scanning a QR-code that contains a secret key. More commonly, it’s the Google-Authenticator compatible two-factor authentication mechanism. TOTP stands for Time-based One-Time Password. While there’s a tiny (tiny!) additional risk in keeping your two-factor keys in your password vault, it’s totally worth it if it gets you to use two-factor authentication more consistently. Password vaults that offer to act as your second factor, perhaps even automatically entering the two-factor code for you as you sign in, make two-factor easier to use. Password vaults and two-factor authentication

Bitwarden free 2fa