# Overview Bitwarden is an absolute modern day necessity when it comes to protecting our digital identities. If you aren't using a password manager right now, you should be, and you should probably use Bitwarden as your first choice. # Setup I would recommend the following setup steps to someone looking to onboard to Bitwarden: - Create an [Authy account](https://authy.com/) via their mobile app. - Enable cloud backups for your 2FA codes. - Be sure to write down the password or have a trusted friend keep a copy of it! - Create a [Bitwarden account](https://bitwarden.com/) via their mobile app or on the web. - Enable 2FA on your account, use Authy to generate the 2FA codes. - Upgrade to a Premium plan for Bitwarden Authenticator, File Attachments, and more! - You can now use Bitwarden for your 2FA code generation for any site. - Make a [SimpleLogin account](https://simplelogin.io/) (either directly, or preferably through [Proton](https://proton.me/)). - Use a SimpleLogin Key to generate Email aliases directly via Bitwarden! ([Reference](https://bitwarden.com/blog/add-privacy-and-security-using-email-aliases-with-bitwarden/)) - (Optional) Buy a YubiKey, and use it for Passwordless, 2FA-less authentication into Bitwarden! - (Optional) Make use of the [Proton](https://proton.me/) suite of applications to reclaim the privacy of your inbox, calendar, cloud storage, and web browsing habits. ## Steam Guard Support Valve (the company behind Steam) has a proprietary 2FA code generation tool, distinct from the standards that the rest of the industry is using. You'd think that this means Bitwarden can't generate 2FA codes for Steam like other applications, and you'd be wrong. However, you will need to jump through some hoops in order to make use of it. ### About Steam Desktop Authenticator The [Steam Desktop Authenticator](https://github.com/Jessecar96/SteamDesktopAuthenticator) application allows for a Windows device to be enrolled as a Steam Guard Authenticator in place of a mobile device. It requires the use of a Steam account that is not currently linked to an enrolled mobile device. ### Adding Steam Guard to Bitwarden 1. Use the Steam Desktop Authenticator to login to a Steam Account. 2. Do not add an encryption password when signing in. 3. Save the Revocation Code in Bitwarden. 4. Navigate to the maFiles directory, and open the file with the .maFile extension. 5. Locate the "uri" key, and copy the `<SECRET_KEY>` from the URL. (Ex. `"uri":"otpauth://totp/Steam:<USERNAME>?secret=<SECRET_KEY>&issuer=Steam"`) 6. Paste the following into the TOTP field in Bitwarden: `steam://<SECRET_KEY>` 7. Verify the codes that are being generated by Steam Desktop Authenticator and Bitwarden are identical. 8. Generate new Steam Guard Backup Keys and save them in Bitwarden. 9. Upload a zipped copy of the maFiles folder from the PC to Bitwarden. 10. Permanently delete the Steam Desktop Authenticator files from the Windows PC (especially the maFiles folder). It is safe to do so, so long as the Revocation Code has been saved in Bitwarden. ### About the Revocation Code Steam only allows for a single mobile device to enroll as a Steam Guard Authenticator. The intended way to remove Steam Guard from a Steam Account is from the enrolled mobile device. The Revocation Code allows for the removal of Steam Guard from a Steam Account without the use of the enrolled mobile device. ### About Steam Guard Backup Codes Each code is a single-use bypass of the token generated by the enrolled mobile device. After use, remove the code from this list. If a new list of Backup Codes is generated, the old list is invalidated. As such, remember to remove each code from the list below as they are used.