Libreyard

Two-factor login on the portal

The portal can download and delete your vault, so it requires a second factor from everyone. It cannot be switched off.

This page is about the portal at app.libreyard.com. Two-step login inside your vault is separate, and each member sets it up for their own Vaultwarden account in the web vault's settings.

Set it up

  1. At your first login the portal shows a QR code and a text key.
  2. Scan the code with an authenticator app that does TOTP. Any standard one works. Do not keep this secret only in the vault that the portal controls.
  3. Enter the six-digit code the app shows.
  4. The portal shows your recovery codes, once. Save them somewhere that is neither your phone nor your Libreyard vault.

Logging in

Email address and password first, then the current code.

Some actions ask for the password and a code again, even when you are logged in: downloading data, showing the admin token, resetting the app's configuration, uninstalling, deleting, closing the account, and changing your password or email address. The second check lasts 5 minutes.

A lost or replaced phone

  1. Log in with your email address and password.
  2. On the code step, choose to use a recovery code and enter one. Each code works once.
  3. The portal takes you through set-up again with a new QR code and new recovery codes.

You get an email whenever a recovery code is used on your account. If that was not you, change your password at once and write to support@baythreesoftware.ca.

No device and no recovery codes

There is no self-service way back in. Write to support@baythreesoftware.ca from the account's email address. Expect to be asked to prove the account is yours, and expect it to take time: the same check that slows you down stops someone else.

Your vault keeps working in the meantime. Portal login and vault login are separate, and losing one does not lock you out of the other.

A forgotten portal password

Use "Forgotten password" on the login page. A link is sent to your email address. You still need a code or a recovery code afterwards. You get an email when the password has changed.

Passkeys

Planned. Not available yet.

Next: Billing and cancelling