Bitwarden supports various forms of two-factor authentication, including time-based one-time passwords (TOTP), Duo, YubiKey, and other hardware-based tokens. This integration enhances the security of the Bitwarden account and allows to store and manage their 2FA credentials for other applications within Bitwarden itself.
It is supported by virtually all cloud-based software applications for business. I am happy to allow users to use this in addition to other authenticators. Certainly, if your business is in the Google cloud it makes sense, but my approach to the remote/virtual work world these past couple of years has been structured flexibility. Leaving some choice up to the users for their own comfort, particularly when they are using their own devices. I cannot think of a scenario where it is less appropriate - perhaps where you run the risk of "app sprawl". I.e., where you are requiring users to handle multiple authenticators (which can happen with certain pieces of hardware) you may want to encourage consolidation into one to avoid frustration.
Easy implementation: The product is very easy to implement both from embedding it into the application and from end users using it via their smartphones.
You can use Google Authenticator to manage multiple two-factor authentication keys.
Easy to add keys options: You can scan a QR code to set up 2FA in Google Authenticator. You can also do a manual entry using the unique key provided by the application you are setting up 2FA for.
It runs on only a few platforms, specifically Android, iOS, and Blackberry and in my opinion it needs to be available on every platform that is out there.
SA drawback I have noticed is that if you swap phones you have to blitz the entire app and go back and sync up all the accounts again which can be very frustrating for new users.
It can also be risky ( for some ) having all all your data centralized in one place.
Bitwarden is easy to use and has a very straightforward simple interface. Having coverage across multiple platforms is the key to its value to me. Additionally, Bitwarden is consistently rated by third party (PC Magazine, Wired, Tom's Guide, etc.) as one of the best password managers available.
It's as easy as opening the app and what I need it for is there. I don't have to fumble with other accounts or getting something else to open it for me. I have all the access that I need for the use of the app within seconds and I can get access to the info that I need.
I have found Google’s support to be hit or miss. There are times when they are very responsive, and I get my issue resolved quickly, and there are times where a response from them takes weeks. There is no in-between. But my support experience with this particular product is nonexistent because I have not had a problem with it yet. Hopefully, we do not have any problems with it either.
This product doesn't ensure single-use, real-time codes. This puts our data at risk and is not as secure as Google Authenticator. I anticipate using Google Authenticator as long as we continue to use the full Google Suite for business. It helps to streamline data and accounts.
Saves me time by storing all of my login information. I'm no longer digging through my notes app or having to reset passwords that I've forgotten.
Stores vendor names, addresses, and W-9's. I don't have to text or email vendor's asking for this info every time I work with them.
Protects my data by identifying weak or unused passwords. Bitwarden helped me identify multiple weak and reused passwords and I quickly updated them using their built-in password generator.
I would say from my limited role in the programs deployed and just being a user, this has been a valuable tool so our ROI is high. We get security and can breathe knowing we have authentication for those who have to be on our network and we are able to protect our work.
