bitwarden / bitwarden/android

[PM-28157] Passkey error with Revolut app: 'Passkeys not supported for this app'

Open
#6,164 30 comments 17 reactions 0 assignees View on GitHub
app:password-manager bug-passkey
Dominant language
Kotlin
Stars
9.4k
Forks
1.1k
Avg merge
1d 14h
Merged PRs (30d)
67

Description

### Origin

Native Application (non-browser app)

### Web URL or App name

Revolut (com.revolut.revolut)

### Passkey Action

- [x] Creating new passkey (Registration)
- [ ] Signing in (Authentication)

### Build Information

App Version: 2025.10.1 (20867)
Build: release/standard
Operating System: Android 16 (API 36)
Device: Samsung SM-A566E (Galaxy A56)

### Additional Information

**Related Issue:**
This appears similar to #6111, which was closed due to insufficient reproduction information.
I'm providing detailed logs, screenshots, and device information to help investigate this issue.

**Steps to reproduce:**
1. Open Revolut app (com.revolut.revolut)
2. Attempt to create a passkey
3. Bitwarden autofill appears
4. Error dialog displays: "An error has occurred - Passkeys not supported for this app"

**Observations:**
- Digital Asset Links verification succeeds (200 response)
- Revolut's certificate fingerprint is correctly verified
- Bitwarden autofill service processes the request (request ID 2254)
- Despite successful verification, passkey operation fails

**Attached:**
- Screenshot of error dialog ![image](https://github.com/user-attachments/assets/21542ad8-dd3e-4783-b0ae-9cac7efe2598)
- Application logs showing the autofill request flow [flight_recorder_2025-11-13_09-40-43.txt](https://github.com/user-attachments/files/23520767/flight_recorder_2025-11-13_09-40-43.txt)

### Issue Tracking Info

- [x] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

Contributor guide

Open the contributing guide

Research direction

Start with the attached flight_recorder_2025-11-13_09-40-43.txt and the Bitwarden autofill request flow identified there, especially request ID 2254. Compare the successful Digital Asset Links verification with the registration failure; done means creating a passkey in Revolut no longer shows “Passkeys not supported for this app.”

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
authentication, mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.