How to start using 2FA for Bitbucket: U2F & TOTP?

Owned by Ruslan Didenko (Unlicensed)
Last updated: Jun 30, 2020
4 min read

Step 1. Download an authenticator mobile application.

You will need an authenticator application on your phone or another device (Duo Mobile, Google Authenticator, Microsoft Authenticator, 2STP, OTP Auth, Authy, or others) for initial device registration.

Ask your Bitbucket administrator what kind of application to download.

 

Note please Google Authenticator is used for example. Alpha -Serve company is not responsible for the operation of third-party applications.

Step 2. Log in with your credentials (username and password) as usual.

2FA will generate a square barcode QR code on the Bitbucket login page. Use your phone or another device to scan the barcode (between the red lines) following the next steps.

 

 

 

 

Step 3. Open an authenticator application on your mobile app and choose to Scan a QR code.

If your device asks you to allow Authenticator to take pictures and record video, press Allow. This is required to scan the barcode using your phone's camera.

Step 4. Use your mobile app to scan the barcode (between the red lines).

Step 5. Your mobile app will generate a verification code.

  1. Enter the code from the mobile app to the Bitbucket Login page and click Enable 2 factor authentication.

  2. Click ADD ACCOUNT in your mobile app.

  3. The code expires after a certain amount of time. And you can see its life expectancy on the right side; there’s a countdown timer. After time expires you will see a new code.

 

 

Step 6. Click Download codes and download files with backup codes to your computer and then click Continue to finish the registration process.

Should you ever lose your phone or access your one-time secret password, we provide secure backup (recovery) codes that can be used to regain access to your account.

Step 7. After registration, you will see a configuration page where you can manage your devices. Here you will have 2 options:

  1. Click skip adding U2F devices to finish the authentication process.

Find how to log in with 2FA for Bitbucket: U2F & TOTP using an authenticator mobile app (TOTP) for the next and all subsequent times here.

2. Click Add U2F Device to add a new device (Yubico Yubikey, NitroKey, TapID, Bluink Key, Feitian, etc.)

 

 

 

How to add a U2F device?

 

Note, as U2F devices are only supported by a few browsers we require you to set up a two-factor authentication app before a U2F device. Thus you'll always be able to log in, even when you use an unsupported browser. 

U2F devices have a proven performance in the following browser: Google Chrome, Mozilla Firefox, Safari.

Click here if you have Mozilla Firefox.

 

Step 1. After clicking Add U2F Device enter your U2F device name (any text which will help you to easily recognize your device) and click Submit. Plug your U2F device in (if you haven't already) and press the button on the device.

 

After you have successfully added the U2F device, you will see the device's name on the list.

Find out how to log in with 2FA for Bitbucket using the U2F device for the next and all subsequent times here.