Password vaults like Bitwarden and (some versions of) LastPass (shown above) have incorporated the open-source Google Authenticator algorithm so that they can also act as your second factor. (It’s also possible for you to display the key in text form in case you’re unable to scan a QR code).

Some password vaults have taken steps to make this a little easier.

Thus, two factors are required to sign in: Your ability to enter the correct code at the correct time proves you are in possession of your second factor: your phone. It’s not random it’s the result of an encryption algorithm involving the secret key. The authenticator application displays a random-looking number that changes every 30 seconds. The process is simple: you set up two-factor by pairing your smartphone with your account, usually by scanning a QR-code that contains a secret key. More commonly, it’s the Google-Authenticator compatible two-factor authentication mechanism. TOTP stands for Time-based One-Time Password. While there’s a tiny (tiny!) additional risk in keeping your two-factor keys in your password vault, it’s totally worth it if it gets you to use two-factor authentication more consistently. Password vaults that offer to act as your second factor, perhaps even automatically entering the two-factor code for you as you sign in, make two-factor easier to use. Password vaults and two-factor authentication

Bitwarden authenticator app