#Bitwarden written in upgrade
#Bitwarden written in code

You are just moving the problem around, since you mustn't use the same master password. You don't want any single failure to deprive you of access to the backup. Put a backup f your vault on that thumb drive. The crux, as you have noted, is the secure storage of both pieces of paper.Ī backup of my Aegis vault stored on a USB Store a second copy offsite in case of fire.

#Bitwarden written in code

I have my Bitwarden master password and backup code written on a sheet of paper But we are talking aboug DR, so that is an aside. I prefer a hardware security token for my Bitwarden account. I have 2FA on my Bitwarden account as well as a few others. It is a little over the top, but I can't trust other people to not lose a USB flash drive of my backups, so in the cloud it goes. So, I only need to know my email, encrypted file storage password and master password and I can get back into everything so long as I have an internet connection. The KeePassXC master password is the same as Bitwarden, but with iterations cranked way up, and the encrypted cloud storage is another password I have remembered.

I then keep an exported copy of Bitwarden in a KeePassXC file that I upload to an encrypted file storage like filen.io, mega or. I keep everything in Bitwarden, for me and family if something were to happen to me. That is the biggest thing, congrats!Īnything else is to satisfy your paranoia. You already have your master password and 2FA recovery code for Bitwarden written down and kept somewhere secure in your home. When it comes to a disaster recovery plan, I feel keeping it simple is the best way to go about it. So what do you guys think? Am I missing any glaring security flaws? If I opt to keep them separate then I will need to add the backup code for my email to all my DR plans as well. Just makes me feel uneasy to have the thing that controls access to my account saved on my account. The only other thing I'm not sure about is whether or not to keep my main email password separate from my Bitwarden vault or not. I was kind of torn between doing this or keeping a Standard Notes file with the backup codes in it but I think this trades off only a tiny bit of security for a good deal more convenience and less reliance on remembering passwords. I plan on keeping all of my other 2FA backup codes inside of Bitwarden itself and just peppering my important passwords. If some situation occurs where I simultaneously lose my memory forever and my entire house and all my devices burn down, then I think I will have much bigger problems and hope that future u/SecureGuy123 doesn't hold a grudge against me, if he ever gets his memory back.

abroad) then I have the secondary Bitwarden account I should be able to access from anywhere. If I lose access to my phone in a place where I dont have easy access to my USBs (e.g. If my house burns down and I lose access to all my devices simultaneously then I have the USB backup of my vault with a relative and also the secondary Bitwarden account. If I forget the password to my Bitwarden vault then I have it written down safe in my home. I feel like this is enough to cover me from 99.9% of disasters. On this I keep only my Bitwarden backup code and a public link to a backup of my Aegis vault on my Google Drive. A secondary Bitwarden account tied to a separate email than my main account and unsecured by 2FA.Also a second copy of my Bitwarden backup code. A backup of my Aegis vault stored on a USB and kept with a trusted relative.A backup of my Aegis vault stored on a USB and kept somewhere in my home.

#Bitwarden written in upgrade

I want to upgrade my DR plan from here and I'm thinking of adding the following to what I already have: I currently have a copy of my Aegis vault exported to OneDrive. I have my Bitwarden master password and backup code written on a sheet of paper kept in the stupidest (and therefore the securest) location possible in my home.

I use Bitwarden for password storage and Aegis as my authenticator. Okay so just started on bitwarden and feel like I want to develop a disaster recovery plan.