2FA for Bitbucket: U2F & TOTP

for Bitbucket Server 6.10.0 - 8.8.2, Bitbucket Data Center 6.10.0 - 8.8.2 and more
39 installs
  • Supported

Enterprise-Grade solution for Bitbucket Two-factor authentication with U2F support built by trusted Atlassian Solution Partner

YouTube's thumbnail image for the video.

TOTP & U2F Support

Supports any mobile application, such as Google Authenticator, Microsoft Authenticator, 2STP, OTP Auth, Authy, and others. For U2F: use FIDO2/WebAuthn devices like Yubico Yubikey, NitroKey, TapID, Bluink Key, Feitian.

Flexible Settings

Get more from a variety of app Settings: Whitelist IP addresses / IP ranges, enable Brute Force defense, Force certain groups to enable MFA, allow to Remember devices for fast login.

Rich Access Logs

Track and analyze users’ activity, search by username, or IP address. Export Authentication logs to CSV, XLS/XLSX.

More details

Enjoy a hassle-free and secure user login to Bitbucket. The app combines simplicity with a great user experience.


  • TOTP (RFC 6238 standard, use any mobile application that generates tokens, such as Google Authenticator, Microsoft Authenticator, 2STP, OTP Auth, Authy and others)
  • U2F Support (FIDO2/WebAuthn devices like Yubico Yubikey, NitroKey, TapID, Bluink Key, Feitian)
  • IP Whitelisting
  • Backup (Recovery) codes
  • Reset 2FA
  • Brute Force defense
  • Option to force users and groups to enable MFA
  • Remember Me
  • Option to force all users to enable MFA except certain groups
  • OAuth Whitelist (smooth integration with other tools)
  • Data Center approved app: designed for high availability and performance at scale
  • Qualified technical support
  • Easy configuration and onboarding, helpful User Guide

Trusted by leading enterprises like Salesforce, PwC, Samsung, IKEA, AUDI, Hitachi, Boeing, and hundreds of others.

Start now with a trial or free demo.

Also available for Jira, Confluence, Bamboo, and Crowd.

Privacy and security

Privacy policy

Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.

Partner privacy policy


This app is part of the Marketplace Bug Bounty Program. Learn more



As U2F devices are only supported by a few browsers, we require you to set up a two-factor authentication app before a U2F device.