# Secure Account Access

### Securing Access

<p class="callout warning">Once logged in, Bitwarden uses insecure settings by default. It is strongly recommended to do the following steps</p>

#### Session Timeouts

Setting session timeouts is essential to prevent anyone with physical access to your devices from stealing passwords

##### Web Vault

Once logged in, go to Settings -&gt; Security -&gt; Session timeout. Set the timeout to something you're comfortable with.

[![image.png](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/scaled-1680-/MH3ImpFti3rKyoyu-image.png)](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/MH3ImpFti3rKyoyu-image.png)

##### Browser Extension

Once logged in, got to Settings -&gt; Account security

[![image.png](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/scaled-1680-/X15XvdqObBRlir9K-image.png)](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/X15XvdqObBRlir9K-image.png)

Set the Session timeout to something you're comfortable with.

[![image.png](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/scaled-1680-/Gxs6HL0xqaBc9XNo-image.png)](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/Gxs6HL0xqaBc9XNo-image.png)

##### Mobile App

<p class="callout info">This process is very similar to "Browser Extension". Find Account security and set the Session timeout</p>

#### Two-factor Login (TFA)

<p class="callout warning">Your passwords protect you, your vault protects your passwords. Protect your vault.</p>

<p class="callout info">This step must be performed in the Web Vault at [https://warden.firehawk-systems.com](https://warden.firehawk-systems.com)</p>

Once logged in, navigate to Settings -&gt; Security -&gt; Two-step login

[![image.png](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/scaled-1680-/Dp3r1xZLe5u5NgDz-image.png)](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/Dp3r1xZLe5u5NgDz-image.png)

If you have a YubiKey and know how to use it, select Passkey. Otherwise select the "Manage" button next to Email. You will be prompted for your password again.

<p class="callout warning">Do not select Authenticator app unless you know what you are doing, Bitwarden app should never be used for this</p>

[![image.png](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/scaled-1680-/SAHXvu02fNbSBURV-image.png)](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/SAHXvu02fNbSBURV-image.png)

Enter the code that gets sent once 'Send email" is clicked. A green tick will appear next to Email when successful

##### Save Recovery Code

The recovery code is required to regain access to your account if the primary TFA method fails, and should be stored somewhere safe.

In the warning box, click "View recovery code". You will be prompted for your password again.

[![image.png](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/scaled-1680-/VC96EXuWTr5YdBFw-image.png)](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/VC96EXuWTr5YdBFw-image.png)

Highlight and copy the pink text, then save somewhere safe.

[![image.png](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/scaled-1680-/55RVfPat65renOZP-image.png)](https://knowledge.firehawk-systems.com/uploads/images/gallery/2026-09/55RVfPat65renOZP-image.png)

#### You have completed the securing of your Bitwarden Account