@joseph I've had no issues with TOTP within Bitwarden personally. I don't use those key strokes, if my account has a TOTP and I ask Bitwarden to fill the creds, it adds the TOTP code to my clipboard, so I can hit ctrl+v when the popup appears. Hasn't let me down yet.
@brandon@mike yep, @hugo he is the hosting guru/legend that actually does all the clever stuff so I can sit back and enjoy the community we're building here.
@joseph exactly. The pin+code becomes your password for webmail. If you enter your normal password, it just fails to login. You then use your normal password with remote apps. It's a strange implementation of 2fa, but it works.
@joseph the webmail prompt doesn't ask for your password. It's literally just the pin and code that's displayed on your device (or yubikey if you have one). Password is only used for remote access apps.
@joseph yeah, I wouldn't mess with it whilst the sync is in place.
I do have 2fa enabled, but it's different to other types I've used. If enabled, you use a pin with a cycling code ONLY when logging on to webmail. You then use your password for all other apps. However, you can set it so it's 2fa only, but all other apps will stop working and you can only use webmail.
@Ghosty yeah, that was one of the deciding bits of info - I don't really care about growing the site, I write stuff on there because it interests me. So are analytics of use? I didn't think so.