

I already deleted the 2FA tokens from my vault. Is this a known security issue and people just decide to do it anyway for convivence? Or am I missing something and it's more secure than I think? If the worst happens and someone breaks my vault, they have my username, password and 2FA tokens so they can log in with no challenge. It seems to me that having the 2FA tokens saved in Bitwarden right next to the password and username kind of defeats the purpose of having 2FA in the first place.

When I switched I got excited and put all my 2FA tokens in Authy on my Phone and in Bitwarden.īut as I was using it the more worried I got. I switched to Bitwarden last month and I like it.
