How to migrate from 1Password to Ayam Secure Secrets?


Two-Step Login, which goes by many different names, is a highly-recommended security practice for securing access to websites and applications. Other names for this practice are Two-Factor Authentication (2FA), 2-Step Verification, and Multi-Factor Authentication. We'll use 2FA for the rest of this guide.

The main premise behind 2FA is that after you enter your password (the first step, method, factor, or evidence in proving your identity), you will be prompted to enter a token generated either by an Authenticator app, a hardware security key (like Yubikey), or sent via SMS (text message) to your phone. These days SMS is considered an unsafe method for sending the 2FA token due to the possibility that mailicious actors could intercept your SMS messages and thus gain access to your 2FA protected accounts. Most banks still use SMS as the 2FA token delivery method and hopefully they will upgrade their security practice soon.

Since your <a href="https://ayamsecure.com/services/secrets" target="_blank">Secrets</a> password manager stores all of your logins, we highly recommend that you secure your password vault with 2FA. Doing so protects all of your logins by preventing a malicious actor from accessing your vault, even if they somehow discover or guess your master password, which you should commit to memory and never write down it anywhere.

Enabling 2FA on your vault will require you to complete a secondary step each time you log in, in addition to your primary login method (your master password). You won't need to complete the secondary step to unlock your vault, only to log in.

This article will guide you in setting up multiple different 2FA methods for your vault. Setting up multiple 2FA methods is best practice so that in case you lose access to one of your 2FA methods you will be able to use one of your other 2FA methods to gain access to your vault.

### Guide to setting up Two-Step Login (2FA) on your Secrets Vault:

Table of Contents:

- [Step 2: Set up Email as a 2FA Method](#step-2-set-up-email-as-a-2fa-method)
- [Step 3: Save your 2FA Recovery Code](#step-3-save-your-2fa-recovery-code)
- [Step 4: Set up Authenticator App as a 2FA Method on Apple iOS](#step-4-set-up-authenticator-app-as-a-2fa-method-on-apple-ios)
- [Step 5: Set up Authenticator App as a 2FA Method on Android](#step-5-set-up-authenticator-app-as-a-2fa-method-on-android)

---

### Step 1: Sign in to your Ayam Secure Secrets Web Vault

2FA set up happens in the Secrets Web Vault (<a href="https://secrets.ayamsecure.com" target="_blank">secrets.ayamsecure.com</a>) rather than the browser extension or mobile apps.

### Step 2: Set up Email as a 2FA Method

Once you're signed in to your Web Vault, on the upper right, select the profile icon and choose `Account settings`.

![](/posts/post-80.png#image-center)

Then from the left sidebar, select `Security`, and then from the tabs, select `Two-step login`.

![](/posts/post-81.png#image-center)

Notice the prominent warning about permanently losing access to your Secrets Vault if your lose access to all your 2FA methods. As a backup, you can use a Recovery Code that will be available after we set up a 2FA method.

First, we'll set up Email as a 2FA method and then we'll set up Authenticator app as a second 2FA method.

At the bottom of the page, click on the `Manage` button to the right of Email, which is the last 2FA "provider", another name for method.

![](/posts/post-83.png#image-center)

After entering your master password, ensure that the correct email address is entered in the first input box and then click `Send email` after which you should see a message saying `Verification email sent to ...` your email address.

![](/posts/post-85.png#image-center)

Go to your email inbox and look for the email from `Ayam Secure Secrets` with the subject of `Your Two-step Login Verification Code`.

![](/posts/post-86.png#image-center)

Copy the 6-digit passcode and return to your Secrets Web Vault and paste the passcode in the second input box and click on `Turn on`.

![](/posts/post-87.png#image-center)

After verifying that everything looks good, click on the `Close` button.

![](/posts/post-88.png#image-center)

Now you have enabled Email as a 2FA method on your Secrets vault and you can confirm this by the green checkmark icon next to Email.

![](/posts/post-89.png#image-center)

If you ever want to disable this Email 2FA method, visit this same page, click on Manage and Turn off.

### Step 3: Save your 2FA Recovery Code

Now that you have a 2FA method enabled, let's view and save your Recovery Code.

At the top of the Two-step login page, click on `View recovery code` and after entering your master password, you will be shown your recovery code.

![](/posts/post-81.png#image-center)

Copy the string of 32 letters and numbers and save it in a safe place. We recommend saving it in your Secrets Vault as that is most likely the safest place for all of your secrets.

![](/posts/post-91.png#image-center)

Of course, there could be a situation where you lose access to your 2FA methods and to log in to your Secrets Vault, you need the recovery code that is saved in your Secrets Vault. For this reason we recommend using the Bitwarden app on different devices, so that you can always have access to your vault. For example, using the Bitwarden mobile app on your phone secured with your fingerprint or Face ID biometrics, using the desktop app, and using the browser extension app.

Remember that you only need your 2FA token when logging in to your Secrets Vault. So, as long as you are logged in to your Secrets Vault on various devices, which should lock after a certain idle time has passed, you will be able to unlock your Secrets Vault with only your master password.

To save the recovery code in your Secrets Vault, click on the `Vaults` menu item on the upper left to navigate back to your Secrets Vault, and then find your Ayam Secure Secrets login item.

If you haven't already saved your Secrets login in your Secrets Vault, do so now by clicking on `New` and then `Item`. We recommend saving your Secrets login details in your Secrets Vault so that in case you forget your master password, you can open your vault on your phone, which if it's secured by biometrics won't prompt you for your master password.

![](/posts/post-94.png#image-center)

Click on your Secrets login item, then towards the bottom under Custom Fields, select `New custom field` of type `Text`.

![](/posts/post-92.png#image-center)

Give this custom field a name of `2FA Recovery Code` and paste the contents in `Value` and click Save.

![](/posts/post-93.png#image-center)

You can also save this recovery code in any other location that you deem to be highly secure, such as a bank safety deposit box.

### Step 4: Set up Authenticator App as a 2FA Method on Apple iOS

(<a href="#step-5-set-up-authenticator-app-as-a-2fa-method-on-android">Click here to jump down to the Android section</a>)

Email is not considered the most secure 2FA method because a malicious actor could intercept your emails and read your 2FA token that is sent in plain text. A more secure 2FA method is using an `Authenticator App` that automatically generates the 6-digit 2FA token, which refreshes every 30 seconds.

On Apple iPhone, starting with iOS 15, there is a built-in feature to generate 2FA tokens. We recommend this method for iPhone users because this 2FA item gets backed up via iCloud Keychain to your iCloud account so that when you get a new iPhone, you won't have to set up this 2FA method again.

In your <a href="https://secrets.ayamsecure.com" target="_blank">Secrets Web Vault</a>, select the profile icon and choose `Account Settings`, then select `Security`, then select `Two-step login`. Next to `Authenticator app`, click `Manage`.

![](/posts/post-95.png#image-center)

After entering your master password, you will be shown a QR code that you can scan with your iPhone.

![](/posts/post-96.png#image-center)

On your iPhone, open the `Settings` app and select `Passwords`.

![](/posts/post-97.png#image-center)

Pass the Passwords app 2FA prompt by either using your Touch ID, Face ID, or a passcode.

![](/posts/post-98.png#image-center)

Then select the `+` icon in the upper right to create a new login item.

![](/posts/post-99.png#image-center)

In the Website section, enter: `secrets.ayamsecure.com` and then select `Done`.

![](/posts/post-100.png#image-center)

From the `Account Options` section of this login item, select `Set Up Verification Code...`.

![](/posts/post-101.png#image-center)

In the menu that pops up, select `Scan QR Code` and point your phone's camera at the QR code shown in your Secrets Web Vault.

![](/posts/post-102.png#image-center)

Enter the 6-digit code shown in your phone's Password app for this login item in Part 3 of the 2FA set up in your Secrets Web Vault and click on `Turn on`.

Now you have enabled Authenticator App as a 2FA method on your Secrets vault and you can confirm this by the green checkmark icon next to `Authenticator app`.

![](/posts/post-109.png#image-center)

When logging in to your Secrets Vault, you will be prompted for this 2FA token. If your phone is not nearby, you can choose `Use another two-step login method` and select Email.

![](/posts/post-110.png#image-center)

![](/posts/post-111.png#image-center)

![](/posts/post-112.png#image-center)

### Step 5: Set up Authenticator App as a 2FA Method on Android

Email is not considered the most secure 2FA method because a malicious actor could intercept your emails and read your 2FA token that is sent in plain text. A more secure 2FA method is using an `Authenticator App` that automatically generates the 6-digit 2FA token, which refreshes every 30 seconds.

For Android, there are multiple authenticator apps to choose from. We recommend <a href="https://play.google.com/store/apps/details?id=com.beemdevelopment.aegis" target="_blank">Aegis Authenticator</a> primarily because its 2FA token settings can be backed up and moved to a new phone. It's also free, secure, and open source.

In your <a href="https://secrets.ayamsecure.com" target="_blank">Secrets Web Vault</a>, select the profile icon and choose `Account Settings`, then select `Security`, then select `Two-step login`. Next to `Authenticator app`, click `Manage`.

![](/posts/post-95.png#image-center)

After entering your master password, you will be shown a QR code that you can scan with your phone.

![](/posts/post-96.png#image-center)

On your Android phone, open the Aegis Authenticator app and click on the red `+` button to add a new 2FA entry.

![](/posts/post-103.png#image-center)

In the menu that pops up, select `Scan QR code` and point your phone's camera at the QR code shown in your Secrets Web Vault.

![](/posts/post-104.png#image-center)

In Aegis, under the Note input box, type something to help you remember why you created this 2FA entry, such as `2FA Token for my Secrets Vault` and click `Save`.

![](/posts/post-105.png#image-center)

Enter the 6-digit code shown in Aegis for this login item in Part 3 of the 2FA set up in your Secrets Web Vault and click on `Turn on`.

![](/posts/post-106.png#image-center)

![](/posts/post-107.png#image-center)

After verifying that everything looks good, click on the `Close` button.

![](/posts/post-108.png#image-center)

Now you have enabled Authenticator App as a 2FA method on your Secrets vault and you can confirm this by the green checkmark icon next to `Authenticator App`.

![](/posts/post-109.png#image-center)

When logging in to your Secrets Vault, you will be prompted for this 2FA token. If your phone is not nearby, you can choose `Use another two-step login method` and select Email.

![](/posts/post-110.png#image-center)

![](/posts/post-111.png#image-center)

![](/posts/post-112.png#image-center)

There you have it! You have now secured your Secrets Vault with Two-step login with multiple 2FA methods including saving your backup recovery code.

If you need further help setting up 2FA on your vault, please don't hesitate to reach out and [contact us](/contact).


How to set up Two-Step Login on your Secrets Vault


Password managers such as <a href="https://ayamsecure.com/services/secrets" target="_blank">Ayam Secure Secrets</a> (powered by Bitwarden) make it easy to store and access unique and secure passwords across all of your devices, keeping your online accounts safer than ever. Using Secrets, you won't need to dangerously repeat simple passwords or leave them exposed in unencrypted formats such as spreadsheets, documents, or sticky notes.

One of the best features of Secrets is the ability to safely and securely share passwords and other private data such as credit card information, WiFi passwords, etc. with others users in your Secrets Organization. This article will help you get started with a two-person organization so you can experience secure sharing in no time.

### Here is a step-by-step guide on how to use Organizations:

Table of Contents:

- [Step 2: Create your organization](#step-2-create-your-organization)
- [Step 3: Update your default collection](#step-3-update-your-default-collection)
- [Step 4: View all your Vault items](#step-4-view-all-your-vault-items)
- [Step 5: Move a vault item to your organization vault](#step-5-move-a-vault-item-to-your-organization-vault)
- [Step 6: Invite users to your organization](#step-6-invite-users-to-your-organization)
- [Step 7: Viewing vault items in the Browser Extension Apps](#step-7-viewing-vault-items-in-the-browser-extension-apps)

---

### Step 1: Sign in to your Ayam Secure Secrets Web Vault

Organization management happens primarily in the Secrets Web Vault (<a href="https://secrets.ayamsecure.com" target="_blank">secrets.ayamsecure.com</a>) rather than the browser extension apps.

### Step 2: Create your organization

Once you're signed in to your Web Vault, on the left-hand sidebar, under `All vaults`, you'll see `My vault`, which is your default personal vault and then an option to create a `New organization`. Go ahead and click that.

![](/posts/post-45.png#image-center)

On the New organization screen, give your organization a name and then enter the email that you used to sign up for Secrets, and click Submit.

![](/posts/post-47.png#image-center)

Once your organization is created, you will then be taken to your organization's vault and shown the `Default collection` of this vault.

> It's important to understand that now there is a personal vault that only you can access and an organization vault that can be accessed by members of the organization and no one else.

![](/posts/post-48.png#image-center)

Another important point to note is that vault items (such as logins, cards, identities, secure notes) can only belong to one vault, either your personal vault or the shared organization vault. Once you share a vault item from your personal vault to an organization vault, you will then have to access your organization vault to be able to edit this vault item.

Don't worry, it's much easier than this because on the home page of your Web Vault you can see the vault items from all your vaults together. Also, in the browser extension apps, you will be able to see vault items from all your vaults.

### Step 3: Update your default collection

Organization vaults store their vault items in a `collection`, which is just a group. You can have as many collections as you want. Go ahead and update the Default collection and give it a name that the members of your organization will recognize because when you share a vault item to an organization vault, you will have to select the collection that it gets added to.

![](/posts/post-49.png#image-center)

![](/posts/post-50.png#image-center)

### Step 4: View all your Vault items

Click on `Vaults` in the top menu bar and you will be taken to the home page of your Web Vault and it will be showing your vault items from all your vaults together. Under the `Owner` column, you can see which vault items belong to which vaults.

### Step 5: Move a vault item to your organization vault

If you want to move a vault item from your personal vault to the organization vault, click on the 3 dots menu icon on the far right of the vault item and select `Move to organization`.

![](/posts/post-51.png#image-center)

In the modal that pops up, select your organization and the collection in your organization to move this vault item to.

![](/posts/post-52.png#image-center)

Now, in the `All vaults` view, you can see in the Owner column the vault item now belongs to the organization vault.

![](/posts/post-53.png#image-center)

Instead of thinking of sharing vault items from your personal vault to the organization vault, it's better to think of `moving` vault items between vaults because as mentioned above, vault items can only belong to one vault at a time.

Now, from the left-hand sidebar, under `All vaults`, you can select `My vault` and the vault items will filter to show just the vault items in your personal vault. And likewise, you can select the organization vault to see just the vault items that are in the organization vault.

### Step 6: Invite members to your organization

Once your organization is setup, to invite other members to your organization (such as your family or team members), in your Web Vault, click on `Organizations` in the top menu bar, then the `Members` tab below your organization name and then click `Invite member`.

![](/posts/post-61.png#image-center)

In the modal that pops up, there are 2 tabs. In the `Role` tab, enter the email of the member you want to invite (ensure that they have already setup their Secrets account before inviting them to your organization and use the same email address that they setup their Secrets account with). Choose the role that this member should have. Owner and Admin roles are similar in Secrets as billing and subscriptions are handled outside of Secrets.

![](/posts/post-65.png#image-center)

In the `Collections` tab, you can choose to give fine-grain authorization to this member or just select `Grant access to all current and future collections` if this is a member you trust, then click Save.

![](/posts/post-62.png#image-center)

![](/posts/post-63.png#image-center)

Back on the `Members` tab of your Organization page, you will see that the member you invited has an `invited` tag next to their name.

![](/posts/post-66.png#image-center)

Then, the member you just invited will receive an email from `hi@ayamsecure.com` with the subject of Join "your organization name". They should click the `Join Organization Now` button in the email and then in the page that opens up in the browser, they should click `Log in` (since they should already have a Secrets account setup).

![](/posts/post-67.png#image-center)

After they have logged in, you as the organization owner need to confirm their membership. From the `Members` tab of your Organization page, click on the 3 dots menu icon next to the invited member and select `Confirm`.

![](/posts/post-68.png#image-center)

The `Confirm User` modal pops up asking you to verify the member's security `fingerprint phrase`.

![](/posts/post-69.png#image-center)

Ask the invited member to login to their Web Vault and then click on their profile on the top right of the menu bar and then select `Account settings`.

![](/posts/post-71.png#image-center)

On the right side of the `My account` page is the member's security `fingerprint phrase`. Confirm that the phrase shown here matches the phrase shown in the owner's `Confirm User` modal and then click on Confirm.

![](/posts/post-72.png#image-center)

Now, finally, the invited member is a confirmed member of your organization.

![](/posts/post-73.png#image-center)

They can now access all the vault items that have been shared to your organization's vault.

![](/posts/post-74.png#image-center)

### Step 7: Viewing vault items in the Browser Extension Apps

On a day-to-day basis, you will most likely be interacting with your Secrets vault items with the Browser Extension Apps. <a href="https://ayamsecure.com/posts/2022-11-how-to-use-secrets/#step-3-download-and-install-the-bitwarden-browser-extension-apps" target="_blank">Read this article on how to setup the Browser Extension Apps</a>.

Open the Bitwarden browser extension app and confirm that you can see your organization's collection from the `Vault` tab.

![](/posts/post-54.png#image-center)

Select the collection to view the vault items in that collection.

![](/posts/post-55.png#image-center)

From the `Vault` tab, click on `Logins` and you will see all your login vault items from all your vaults. The vault items that are in your organization vault have a boxy shared vault icon next to the vault item name.

![](/posts/post-56.png#image-center)

To move an item from your personal vault to your organization vault, click on the vault item you want to move and then scroll down and click on `Move to organization`.

![](/posts/post-57.png#image-center)

Then select the organization and the collection in your organization vault that you want to move this vault item to and click on `Move` on the upper right.

![](/posts/post-58.png#image-center)

Back on your `Logins` view, you can now see that the item you just moved to your organization vault has the boxy shared vault icon next to the vault item name.

![](/posts/post-60.png#image-center)

There you have it! You now know how to create an organization in Secrets, invite and confirm a member to your organization, and move vault items from your personal vault to your organization vault.

If you need further help setting up your organization or organizing your vault items, please don't hesitate to reach out and [contact us](/contact).


How to use Organizations in Secrets Password Manager


In today's world, where most of our personal and professional life is conducted online, keeping our digital identity secure has become crucial. Passwords are the primary gatekeepers of our digital identities, and it is essential to manage them correctly to protect our sensitive data. In this post, we will discuss the best practices for password management to ensure your online safety.

1. Use Strong Passwords

   A strong password should be at least 12 characters long and include a combination of upper and lower case letters, numbers, and special characters. Avoid using predictable passwords such as "123456" or "password." Instead, use a passphrase, which is a sequence of random words, to make it easier to remember and harder to crack.

2. Use a Password Manager

   A password manager is a secure software tool that stores all your passwords in an encrypted format. It allows you to create and store strong passwords for all your accounts without having to remember them. Password managers also help you avoid using the same password across multiple accounts, which is a security risk.

3. Enable Two-Factor Authentication

   Two-factor authentication (2FA) adds an extra layer of security to your accounts by requiring an additional authentication factor, such as a code generated by an app or a fingerprint scan, along with your password. It is an effective way to prevent unauthorized access to your accounts.

4. Change Your Passwords Regularly

   Regularly changing your passwords helps prevent them from being compromised. It is recommended to change your passwords every 90 days. Additionally, if you suspect that one of your accounts has been compromised, change the password immediately.

5. Use Different Passwords for Each Account

   Using the same password for multiple accounts is a significant security risk. If one of your accounts is compromised, hackers can use the same password to gain access to all your other accounts. It is crucial to use a different password for each account.

6. Avoid Sharing Your Passwords

   Sharing your passwords with others, even with family and friends, is never a good idea. If you must share your password, create a temporary one and change it as soon as the other person is done using it.

7. Be Cautious of Phishing Scams

   Phishing scams are attempts to trick you into revealing your passwords and other sensitive information. Be cautious of emails or messages that ask you to click on a link or provide your login credentials. Always verify the legitimacy of the request before providing any personal data.

## Conclusion

Effective password management is crucial in keeping your online identity safe and secure. Use strong passwords, enable two-factor authentication, use a password manager, change your passwords regularly, use different passwords for each account, avoid sharing your passwords, and be cautious of phishing scams. By following these best practices, you can ensure that your digital identity is protected, and you can enjoy a safer and more secure online experience.


Best practices for password management


LastPass is a popular password manager that has been around for many years. However, in recent years, many users have started to switch to other password managers, including Ayam Secure Secrets (powered by Bitwarden). If you are considering making the switch from LastPass to Secrets, here is a guide on how to migrate your data:

### Step 1: Create an Ayam Secure Secrets account

Before you can start migrating your data from 1Password to Secrets, you need to create a Secrets account. Vist the [Secrets service page](/services/secrets) and pick a subscription plan. After you checkout, follow the steps on the [how to get started with Secrets page](/secrets-get-started) to create your account.

### Step 2: Export your data from LastPass

Next, you need to export your data from LastPass. This can be done by logging into your <a href="https://lastpass.com/?ac=1" target="_blank">LastPass web vault</a>, clicking on `Advanced Options` in the lower left-hand menu, and then from the `Manage your Vault` section, select the `Export` option.

![](/posts/post-38.png#image-center)

At this stage, LastPass will send you an email to confirm the export. From your email inbox, confirm the export, then return to your LastPass web vault, and select the Export option again to complete the export. Depending on your browser, your data will either be automatically saved as a `.csv` or printed to the screen in a `.csv` format.

If your data was printed to the screen, highlight the text and copy and paste it into a new `export.csv` file using your note pad editor (make sure to save the file as a `.csv` and not `.txt`).

![](/posts/post-42.png#image-center)

### Step 3: Import your data into Secrets

Once you have exported your data from LastPass, you can import it into Secrets. To do this, log in to the Secrets Web Vault in your browser (<a href="https://secrets.ayamsecure.com" target="_blank">secrets.ayamsecure.com</a>) and click on `Tools` in the top left-hand menu. Then, select `Import data` and choose the `LastPass (csv)` file format for your import. Follow the prompts to import your data into Secrets.

![](/posts/post-43.png#image-center)

### Step 4: Check your imported data

After importing your data into Secrets, it's a good idea to check that everything has been imported correctly. Take some time to go through your passwords and other data to ensure that everything is in order. If you notice any errors with your imported credentials, you can fix them manually by editing that specific credential. If you're having some issues importing your data, please follow the <a href="https://bitwarden.com/help/import-from-lastpass/#import-troubleshooting" target="_blank">troubleshooting steps</a> here or [contact us](/contact) for further help.

### Step 5: Delete your data from LastPass

Once you have successfully migrated your data to Secrets, you should delete your account from LastPass. This is an important step to ensure that your data is not compromised. To do this, log into your LastPass account and then visit this <a href="https://lastpass.com/delete_account.php" target="_blank">Delete Account</a> page to start the process of deleting your account.

In conclusion, migrating from LastPass to Secrets is a straightforward process that can be completed in just a few steps. By following the above guide, you can ensure that your data is securely transferred to your new password manager. Secrets offers a robust set of features and is a popular choice among users who are looking for a reliable and user-friendly password manager.

Next, you can read this [guide on how to use Secrets](/posts/2022-11-how-to-use-secrets/) to its full potential and keep your sensitive data safe and secure.


How to migrate from LastPass to Ayam Secure Secrets

Step 1: Create an Ayam Secure Secrets account

Step 2: Export your data from LastPass

Step 3: Import your data into Secrets

Step 4: Check your imported data

Step 5: Delete your data from LastPass

Read next

How to migrate from 1Password to Ayam Secure Secrets?

How to set up Two-Step Login on your Secrets Vault

How to use Organizations in Secrets Password Manager

Best practices for password management