Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Master password reprompt missing (browser extension, web vault and desktop app) #9202

Open
1 task done
pamperer562580892423 opened this issue May 16, 2024 · 9 comments
Open
1 task done
Labels
browser Browser Extension bug

Comments

@pamperer562580892423
Copy link

Steps To Reproduce

  1. Go to the browser extension, web vault or desktop app.
  2. Click on "new entry" or "edit entry"
  3. Scroll down through the whole "form"
  4. The "master password reprompt"-check is nowhere to find.

Expected Result

  1. Find/see the "master password reprompt" and 2. being able to check or uncheck it.

Actual Result

The "master password reprompt"-check is nowhere to find. (no text, no checkbox... nothing)

Screenshots or Videos

"New entry" in my browser extension (2024.4.2) - "master password repromt"-option nowhere to find:

image
image

"New entry" in my web vault - "master password repromt"-option nowhere to find:

image

"New entry" in my desktop app (2024.4.3) - "master password repromt"-option nowhere to find:

image

Additional Context

I just tested this out of curiousity, because in the Community Forum was a problem with autofilling IDs and master password reprompt reported (https://community.bitwarden.com/t/autofilling-id-requires-master-password/66935).

Therefore I don't know how long I am missing the option.

And by the way: it is there in my mobile app (2024.4.0, Android 13).

Operating System

Windows

Operating System Version

Windows 11

Web Browser

Brave

Browser Version

Version 1.65.133

Build Version

2024.4.2

Issue Tracking Info

  • I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
@pamperer562580892423 pamperer562580892423 added browser Browser Extension bug labels May 16, 2024
@pamperer562580892423 pamperer562580892423 changed the title Master passwort reprompt missing (browser extension, web vault and desktop app) Master password reprompt missing (browser extension, web vault and desktop app) May 16, 2024
@pamperer562580892423
Copy link
Author

And by the way: it is there in my mobile app (2024.4.0, Android 13).

What I meant was: the option is there for me (only) in the mobile app. (2024.4.0, Android 13)

@Adedamola-Aina
Copy link
Member

Hi @pamperer562580892423

I attempted to reproduce your issue and was unable to do so. could you please log out then log back into your vault.

We use GitHub issues as a place to track bugs and other development related issues. If your issue persists, please write us back using our “Contact support” form located on our Help Center (https://bitwarden.com/help/).

You can include a link to this issue in the message content.

Alternatively, you can also search for an answer in our help documentation or get help from other Bitwarden users on our community forums (https://community.bitwarden.com/c/support/).

Thanks!

@pamperer562580892423
Copy link
Author

pamperer562580892423 commented May 16, 2024

@Adedamola-Aina Thanks, but I just was logged out (again: browser extension, web vault, desktop app) and logged in again. Same situation as you can see in my pictures above. The option is still nowhere to find for me (exception: in the mobile app). BTW: in the web vault-picture from yesterday it was a free account I use for testing - but now I logged in also to my premium account in the web vault and this option is missing too. (but not that surprising, since the pictures from the browser extension and desktop app were from my premium account - and so it happens with two accounts for me...)

@Jademalo
Copy link

Jademalo commented May 20, 2024

I'd like to add myself to the list of people having this issue, I first noticed it on 2024/05/01 and made a post on the community forums.

I have attempted various things such as logging out and reinstalling the extension, but I still don't need to input my master password when using the Firefox extension.

Interestingly, using the desktop app or the web vault I do have to put in my master password again, so this does seem to specifically be an issue with the Firefox extension for me. The option is also still available to select on the desktop app and the web app.

@CoocooFroggy
Copy link

I too am having this issue. It seems like a security vulnerability as anyone can access or edit details of a "master password reprompt" item without needing the master password.

@edmundo096
Copy link

Same issue on Chrome 2024.4.2 and Desktop 2024.4.1.

@JordanBarnartt
Copy link

JordanBarnartt commented May 30, 2024

I'd like to report this same issue on the Firefox browser extension version 2024.4.2. Firefox itself is version 126.0.1. Using the web vault does re-prompt for my master password, but as described above, the Firefox extension does not re-prompt and the option to enable/disable the feature is missing.

Update: Removing the extension from Firefox and re-installing it fixed the issue for me.

@pamperer562580892423
Copy link
Author

@Adedamola-Aina et al.: I still too have this. Checked just now in my browser extension and desktop app: there is still no option to check or uncheck the master-password-repromt. The option is completely missing. Every app up-to-date, logged out and in multiple times the last two weeks. This is definitively a bug.

@pamperer562580892423
Copy link
Author

pamperer562580892423 commented Jun 1, 2024

Quick update: I just did the update of the browser extension to 2024.5.2 (Chrome / Brave). The option is still missing (regardless if I edit an entry or create a new vault item - the master password option is simply not there).

And I'm beginning to think, this might be a server issue, because in my case, it is not only one client where the option is missing, but - as I wrote in the title - in all three clients (browser extension, web vault, desktop app), except on mobile (Android).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
browser Browser Extension bug
Projects
None yet
Development

No branches or pull requests

6 participants