bitwarden / bitwarden/clients

Master Password Re-Prompt not working in Desktop Firefox Extension and Bitwarden Android Mobile App

Open
#7,799 5 comments 3 reactions 0 assignees View on GitHub
browser bug
Dominant language
TypeScript
Stars
13.8k
Forks
2k
Avg merge
3d 9h
Merged PRs (30d)
397

Description

### Steps To Reproduce

1. Go to Bitwarden Web vault - https://vault.bitwarden.com
2. Create a Secure Note and check the "Master Password Re-Prompt at the bottom" and save it.
3. Open the Secure Note you just created, and you'll be asked to re-enter the Master Password.

### Expected Result

I expect the Master Password Re-Prompt to appear the same way it appeared in the Web vault in my Desktop Firefox Extension and Bitwarden Android Mobile App.

### Actual Result

I can see all of my Secure Notes without entering my Master Password. The Master Password Re-Prompt only seems to be working on the Web vault.

### Screenshots or Videos

_No response_

### Additional Context

Other desktop browser extensions other than Firefox and mobile platform like iOS App maybe affected too.

### Operating System

Windows, Android

### Operating System Version

Windows 10, Android 13

### Web Browser

Firefox

### Browser Version

122.0

### Build Version

2024.1.1

### Issue Tracking Info

- [X] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the Secure Note behavior in the Firefox extension and Bitwarden Android Mobile App, then compare both with the Web vault flow described in the issue. The work is done when Secure Notes marked for Master Password Re-Prompt require that prompt before viewing them in the affected clients.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, typescript
Domain
authentication, desktop, mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.