You need to read these instructions carefully—there are two important actions required for your Vaultwarden account to work fully.
You're receiving this email because you manage some credentials for
Tor.
---
You're receiving this email because you manage credentials for Tor's third-party services. We're introducing **Vaultwarden**, a self-hosted password manager, to securely share team and organizational credentials.
You need to read these instructions carefully -- there are *two*
important actions detailed here that are required for your Vaultwarden account
to work fully.
### Getting Started
...
...
@@ -30,21 +31,47 @@ You'll soon receive two emails from Vaultwarden `<noreply@torproject.org>`:
- An invitation to create an account.
- An invitation to join your team's "Organization."
You **only need to click the link in the second email** (team invitation). This link will let you both create your account and join your team.
You **only need to click the link in the second email** (team
invitation). This link will let you both create your account and join
your team.
### Critical Steps (must be completed)
1.**Set up Two-Factor Authentication (2FA)** immediately after creating your account. Full functionality will not be available without 2FA.
2.**Send me your account’s Fingerprint Phrase securely** (found under your account settings). Without this step, your account will remain limited, and you should not add credentials yet.
1.**Set up Two-Factor Authentication (2FA)** immediately after creating
your account. Full functionality will not be available without 2FA.
2.**Send me your account’s Fingerprint Phrase securely** (found under
your account settings). Without this step, your account will remain
limited, and you should not add credentials yet.
Once confirmed, you'll receive another email titled **"Invitation to The
Tor Project confirmed."**
## How to use
You can interact with Vaultwarden using various client tools. The web
interface that you have used to setup your account is not the most
useful way to use this tool!
The web extension is recommended as the primary method because it is
most extensively audited for security and offers ease of use. Other
client tools, including desktop applications, are also available. Choose
the client that best suits your needs and workflow.
Once confirmed, you'll receive another email titled **"Invitation to The Tor Project confirmed."**
Available clients are here: https://bitwarden.com/download/
To use one of these clients, simply configure it to use the self-hosted
server, and put https://vault.torproject.org as the location.
### Adding Credentials
After confirmation, use the web interface:
- Navigate to the `Team` collection under **Collections** in the left sidebar.
- Click **“New”** (top right) and select **"Item"** to add credentials. Credentials added here are accessible by the team.
- Navigate to the collection under **Collections** in the left sidebar.
- Click **“New”** (top right) and select **"Item"** to add
credentials. Credentials added here are accessible by everyone who is
part of that collection.
**What Credentials to Include:**
...
...
@@ -62,16 +89,13 @@ If unsure, please contact me.
Create new Folders or Collections using the **"New"** button.
### Client Tools
You can also interact with Vaultwarden using various client tools. The web extension is recommended as the primary method because it is most extensively audited for security and offers ease of use. Other client tools, including desktop applications, are also available—choose the client that best suits your needs and workflow.
