

You can delete that file once the TOTP in BitWarden is working. Note: WinAuth stores its settings in %APPDATA%\WinAuth\winauth.xml. Note: Generate recovery codes on the / Blizzard or Steam websites as needed. It will produce an 8-digit code that can then be used with and Blizzard. Bitwarden's password manager browser extension has a known exploit it hasn't addressed in five years (Update: fix coming) Security researchers are trying to get the company to reassess the threat. Otpauth://totp/BattleNet:?secret=DTQVJKTQK5FN2MMCUFE8RTKARN9RM3AZ&digits=8&issuer=BattleNet&serial=US232383696946Ĭopy and paste that string in whole into BitWarden's TOTP field for your login. The text file should look something like this (the data in this string has been randomized for security): Hit Browse for where you want to put the file, then hit OK.Įxtract that ZIP. WinAuth would not let me export the text file without this option selected. Open the WinAuth app and set up .Ĭheck the box to protect the ZIP file and enter a basic password. Here's a short guide using as an example: To find the secret, you can use an open source program called WinAuth to grab the secret and create the TOTP string with proper parameters. You might have noticed that Steam and do not supply the secret in plaintext when setting up 2FA, which prevents BitWarden's TOTP/2FA feature from being used.
