On this page

Setting Up Multi-Factor Authentication (MFA)

Overview

Once your StrongKeep account has an active subscription, every account is required to set up Multi-Factor Authentication (MFA) before continuing to use the platform. MFA adds a second layer of protection on top of your password, so a stolen or guessed password alone isn't enough to access your account.

The first time you log in after your subscription becomes active, you'll be prompted to set up MFA. Alternatively, you can go to Settings → Security at any time to manage MFA.

You can choose between two methods:

  • TOTP (Authenticator App) — a 6-digit code generated by an app on your phone or in your password manager. ✅ Recommended.

  • Email — a one-time code sent to your registered email address.

Option 1: Set Up TOTP (Recommended)

You'll need an authenticator app on your phone, such as:

  • Google Authenticator (iOS / Android)

  • Microsoft Authenticator (iOS / Android)

  • Or any other TOTP-compatible app, including your Vaultwarden password manager (see below).

Steps:

  1. Log into StrongKeep and go to Settings → Security → Multi-Factor Authentication.

  2. Select TOTP (Authenticator App) as your MFA method.

  3. StrongKeep will display a QR code and a setup key (a string of letters/numbers) as a backup.

  4. Open your authenticator app and choose Add account / Scan QR code.

  5. Scan the QR code shown on screen. If you can't scan it, enter the setup key manually instead.

  6. Your app will now display a rotating 6-digit code. Enter this code into StrongKeep to confirm setup.

  7. Click Verify & Enable.

💡 Tip: Save the setup key or any recovery codes provided somewhere safe — you'll need them if you lose access to your phone.

Option 2: Set Up Email MFA

  1. Log into StrongKeep and go to Settings → Security → Multi-Factor Authentication.

  2. Select Email as your MFA method.

  3. StrongKeep will send a one-time code to your registered email address.

  4. Enter the code into StrongKeep to confirm setup.

  5. Click Verify & Enable.

From now on, a new code will be emailed to you each time you log in.

Using Vaultwarden to Store Your TOTP Code

If you're already using StrongKeep's Vaultwarden password manager, you can save your TOTP setup directly inside a vault item — so your login and MFA code are stored together and auto-filled when you sign in.

  1. Open Vaultwarden and either create a new item or open the existing login item for StrongKeep.

  2. Scroll to the Authenticator Key (TOTP) field.

  3. When StrongKeep displays the QR code and setup key during MFA setup (Step 3 above), copy the setup key and paste it into the field.

  4. Save the item.

  5. Vaultwarden will now generate a rotating 6-digit code next to the login item, the same way an authenticator app does. When logging into StrongKeep, copy this code (or use the browser extension's autofill) instead of switching to a separate app.

💡 Tip: Storing the TOTP code in Vaultwarden is convenient, but if the same master password unlocks both your login and your MFA code, consider keeping a separate authenticator app (Google or Microsoft Authenticator) as a backup in case you're ever locked out of your vault.

Tips & Troubleshooting

  • Lost access to your authenticator app?
    Use email to recover access to your account.

  • Want to manage or switch methods later?
    Go to Settings → Security and choose a new method at any time.

  • Not receiving email codes?
    Reach out to support@strongkeep.com for help.