bitwarden / bitwarden/android

Bitwarden not offered as a passkey option when adding a Google Account to an Android device

Open
#3,800 5 comments 5 reactions 0 assignees View on GitHub
app:password-manager bug
Dominant language
Kotlin
Stars
9.4k
Forks
1.1k
Avg merge
1d 14h
Merged PRs (30d)
67

Description

### Bitwarden Beta

- [X] I'm using the new native Bitwarden Beta app and I'm aware that legacy .NET app bugs should be reported in [bitwarden/mobile](https://github.com/bitwarden/mobile)

### Steps To Reproduce

1. Set up a passkey for a Google account (e.g. via browser)
2. In Android, setup bitwarden as the default and only passkey provider
3. In Android, add the same Google account from the settings panel

Note: this happens on the non beta version as well and it

### Expected Result

4. The system UI will prompt to use a passkey, offering BW as an option

### Actual Result

4. The system UI will prompt to use a passkey, but there's no way of using bitwarden as the passkey provider
5. Open a browser on the same android device
6. Go to accounts.google.com
7. Try to login with the same google account as step 1, notice that now Bitwarden is offered as a passkey manager

### Screenshots or Videos
![image](https://github.com/user-attachments/assets/da1f7a09-e17f-4acc-ba78-fa7da02a6daa)
![image](https://github.com/user-attachments/assets/cd12f9ce-01eb-4af0-9b49-a97662228091)
![image](https://github.com/user-attachments/assets/d046f034-ad5e-4be8-a49f-29e27a8ad24e)

### Additional Context
_Note that that prompt seems to be handled by Google Play Services_

This is quite tricky, as I almost couldn't add my google account on a new phone since it was not accepting Bitwarden as a passkey manager. Fortunately after a few failed attempts google has a fallback on the less secure password authentication

### Build Version

2024.8.0

### Environment Details

- Device: multiple, android 13 and 14

### Issue Tracking Info

- [X] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

Contributor guide

Open the contributing guide

Research direction

The report covers Android 13/14 account setup and identifies Google Play Services as the apparent owner of the prompt; it names no repository file or test. First reproduce the account-add flow with Bitwarden as the only passkey provider, then trace whether the Android app receives or handles this request. Done means Bitwarden is offered in the system passkey prompt, or the external ownership is documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
authentication, mobile
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.