bitwarden / bitwarden/android

[PM-40668] On Waterfox one gets "Unrecognized browser" on passkey-usage, though Waterfox is in the "FIDO2 privileged browsers list"

Open
#7,185 2 comments 0 reactions 0 assignees View on GitHub
app:password-manager bug
Dominant language
Kotlin
Stars
9.4k
Forks
1.1k
Avg merge
1d 14h
Merged PRs (30d)
67

Description

### Steps To Reproduce

1. Install Waterfox on your Android phone
2. In Waterfox, go to community.bitwarden.com
3. There, try to log in with passkey

### Expected Result

Passkey login to be successful without any "incidents".

### Actual Result

The BW Android app shows the following error message:

Image

And of course I can choose "Trust", but as Waterfox already is in the FIDO2 privileged apps list (see "Additional context"), that error message shouldn't come up in the first place - and it shouldn't be necessary to "Trust" manually.

### Screenshots or Videos

_No response_

### Additional Context

I have Waterfox version 1.2.6 installed on my phone now.

---

From what I understand, Waterfox is already in the ["FIDO2 privileged browsers list"](https://github.com/bitwarden/android/blob/1fd41426057a267d6d8f7ca7be9d87b496269619/app/src/main/assets/fido2_privileged_google.json):

```
{
"type": "android",
"info": {
"package_name": "net.waterfox.android.release",
"signatures": [
{
"build": "release",
"cert_fingerprint_sha256": "29:39:99:7A:2D:8F:07:30:3C:EB:37:AD:68:10:AF:EF:0B:DA:71:0B:E2:11:64:76:E3:52:5A:73:79:EC:2E:1A"
}
]
}
```

It looks like this entry has to be updated?!

PS: Ah, in retrospect I'm not sure if I had better chosen the "Passkey Bug Report" form/category? 🤔

### Build Version

2026.6.1 (21713)

### What server are you connecting to?

EU

### Self-host Server Version

_No response_

### Environment Details

© Bitwarden Inc. 2015-2026

Version: 2026.6.1 (21713)
📱 Fairphone FP5 🤖 15@35 📦 prod
🧱 commit: bitwarden/android/release/2026.6-rc57@e5ee43f68773f9fe20bec3dd664781d65b804967
💻 build source: bitwarden/android/actions/runs/28253991408/attempts/1
🦀 SDK: 3.0.0-7536-159aed97
🌩 Server: 2026.6.2 @ EU

### Issue Tracking Info

- [x] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

Contributor guide

Open the contributing guide

Research direction

Start with app/src/main/assets/fido2_privileged_google.json and inspect the Waterfox entry, then reproduce the passkey login flow on Android using Waterfox 1.2.6. Compare the installed browser signature with the listed certificate data. Done means Waterfox is recognized as privileged and passkey login no longer shows the unrecognized-browser prompt.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
authentication, mobile
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.