bitwarden / bitwarden/ios

[PM-41962] iOS AutoFill TOTP prompt displays Item Name instead of Username, making multiple accounts indistinguishable

Open
#2,959 1 comment 0 reactions 0 assignees View on GitHub
app:password-manager bug
Dominant language
Swift
Stars
684
Forks
154
Avg merge
7d 2h
Merged PRs (30d)
32

Description

### Steps To Reproduce

1. Go to a website or app login page where you have multiple accounts saved in Bitwarden (e.g., epicgames.com).
2. Tap on the login fields and autofill the credentials for one of your accounts.
3. Advance to the two-factor authentication (TOTP) verification step.
4. Tap on the verification code input box to bring up the native iOS keyboard autofill suggestion.

### Expected Result

The native iOS security code suggestion text should display the item.username or a combination of name and username (e.g., "Epic Games (my_username)") so that users can verify which account's token is being populated, especially when managing multiple credentials for the same service.

### Actual Result

The prompt displays "Verification code for epicgames.com" followed by the item.title (e.g., "Epic Games"). If a user has three separate accounts for the same service all named "Epic Games", the autofill suggestions appear completely identical at the TOTP step.

### Screenshots or Videos

Image

### Additional Context

_No response_

### Build Version

2026.7.1

### What server are you connecting to?

Self-host

### Self-host Server Version

1.37.1

### Environment Details

Device: iPhone
iOS: 26.6

### Issue Tracking Info

- [x] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

Contributor guide

Open the contributing guide

Research direction

Start by tracing the iOS AutoFill security-code flow used after TOTP autofill and identify where the item title is supplied to the native suggestion. Reproduce the issue with multiple same-title accounts, then verify that the suggestion distinguishes them by including the username or equivalent account-specific information.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios, swift
Domain
authentication, mobile-dev
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.