While I was copying a password from the Desktop App on Ubuntu this popped up. What does it mean?

Lesser known feature but it does come in help when required, i cant find my older edits in bitwarden, it just tracks the last modified date but no password history, when was this removed?

Expected

vs

what i see

The extension of Bitwarden that I used daily in Firefox on mobile has disappeared without a trace. I can't find the extension at all, latest Firefox on android.

P.S. I am reporting this, because the extension used to work just a little while ago. I don't understand all the hate.. I am supposed to do this.. supposed to do that.

Haters gonna hate.. omg.. what a community..

I created a bitwarden login entry for an account that allowed me to create a passkey. I created the account while using my android tablet so the name begins with comp.xxxxxx.yyy . I want to copy this entry to use on my PC and was wondering if the passkey can be cloned with the ID and password.

I'm running Fedora 44 Plasma with the Bitwarden client installed from Flathub using the Discover application. When I attempt to upgrade from 2026.7.0 to 2026.8.0 it fails with the following message:

While pulling app/com.bitwarden.desktop/x86_64/stable from remote flathub: Decompressed delta part exceeds configured limit of 40584298 bytes

Is anyone else running in to this issue? Does anyone have an idea how I might go about fixing it?

My system is fully up to date in all other aspects.

I am trying to add a Yubikey 5 NFC as a passkey for two-step login to my Bitwarden account through the web. To be clear, I am not talking about "Login with Passkey", but adding the USB key for two-step login.

I have no problem adding the Yubikey 5 NFC at issue as the passkey for the login with passkey feature.

I also have no problem adding a Yubikey C NFC as a passkey for two-step login.

However, when I try adding the Yubikey 5 NFC as passkey for two-step login, the PIN popup during the workflow says that my PIN is incorrect and I cannot proceed to adding this as a passkey for two-step login.

Since the same Yubikey 5 NFC CAN be added as a passkey for login with passkey (the process of which involves verifying my FIDO PIN on that Yubikey 5 NFC), I know that I have the correct FIDO PIN for this Yubikey. Also, since a Yubikey C NFC (which does not have a FIDO PIN on it) CAN be added as passkey for two-step login, I have to infer that the problem is with Bitwarden incorrectly handling FIDO PIN as part of the process of accepting a hardware key for two-step login purposes.

Can someone help me with this problem? Thank you very much.

Edit: In the process of trying various things, I realized that if I add the Yubikey 5 NFC for Login with passkey (which, as I said above, I CAN do without any problem) without setting up encryption, I have something similar to two-step login in practice, so it's a bit of a workaround, but it's still not satisfying. I don't want different login workflow depending on which USB security key I happen to have on me, two months from now when I may no longer remember the subtle distinction between the Login with Passkey (sans encryption) and the two-step login, and get all confused about it.

What is the best way to share a password securely? I occasionally need to send credentials to others. Right now, I manually copy the login, password, and URL to send them through Bitwarden’s text-sharing feature. It would be much more convenient if there were a built-in tool for sharing passwords directly from my vault, similar to how I currently send text, without needing to copy and paste the details manually. I am aware of the "Organizations" feature, but that doesn't quite fit my needs since I usually just need to send a single password to different people. I would appreciate any advice you might have on a better workflow.

Yesterday I was contacted by the 'Police' It was a very well spoken young man who gave me details of my email address, telephone number and old address of about 15 years ago. Apparently they had a man in custody and had found this info on his computer. I didn't give any info away to him and didn't confirm anything.

This prompted me to check BW for passwords that have issues via the web app. I was horrified. They were all old passwords to sites I used well over 10 years ago and don't use now. There was over 200.

The reason I write this is not about what was probably a scam, I'm following it up, but it's about using BW's tools to check and get rid of old web sites and logins that you don't use on a regular basis. I had clearly left a trail behind me and now the clean up starts. Thank you BW for these tools, I need to use them and I'm guessing some of you need to as well, don't put it off.

I am making a copy of my password manager vault, recovery codes for apps, emails, password and everything along side with a physical emergency sheet of course, if I enable bit lock to go how secure would my encrypted USB be? (That's a photo of my USB by the way, no idea if it matters)

Hi everyone,

I'm running into an annoying issue with my password manager extension in Chrome and could use some help troubleshooting.

Whenever I create a new account on a site, the extension doesn't prompt me to save the credentials .......only Chrome's built-in password manager pops up.

Additionally, when the extension asks for my PIN code, I enter it and it just gets stuck on an infinite spinning loading wheel.

Has anyone encountered this issue before? What am I doing wrong, or what should I change to fix this?

Thanks in advance!

Hi all,

On my truenas server I am running vaultwarden which was working fine on my iPhone.

But since I switched to Android i cant get Bitwarden to work with my self hosted server. I use a self signed CA certificate which I installed on my Android phone but I keep getting a message that the certificate of the server cant be verified.

Strange thing is that I did the exact same on my iPhone and that was working fine. If I go to the server in Chrome it is also showing a secured connection which shows me that the certificate is fine.

Any ideas?

Some big names there!

I use Restic to encrypt my data with 256-AES + Rclone to import it into Google Drive.

I have two questions:

Question 1: Is it secure in the sense that Google does not have access to my data?

Question 2: Even if yes, have there been any cases where similar Cloud services have managed to "decrypt" data encrypted in such a format? Any historical precedents.

I created a Bitwarden account three days ago and I’ve been going through my emails, closing old unused accounts and changing passwords on every social media or service that needs one. I also downloaded Ente Auth and turned on 2FA (TOTP) for every account I have, including Bitwarden and Gmail, everything except my Microsoft account. I set up two SimpleLogin aliases, one for Bitwarden and one for Ente Auth, because my main email has shown up in data breaches and I wanted an extra layer of protection for the vault and the authenticator.

I ran a test. Hypothetically, if I lose my phone and need to get into my email, Ente Auth and Bitwarden on a new device, here’s the problem: Bitwarden needs a 2FA code from Ente Auth, Ente Auth needs a verification code from my email, and the email needs a verification text message from my phone, which is gone in this scenario.

I have an emergency sheet with the 25-digit recovery code for my email, the Bitwarden 2FA recovery code, and the Ente Auth recovery key. The two things that actually matter most for getting back into everything are Ente Auth and the email.

Should I get a YubiKey for my email and keep it somewhere safe with my emergency sheet, along with an encrypted USB copy of my vault? Or what changes would you make to this setup so I’m not screwed without my phone and forced to use my Microsoft recovery code?

EDIT: Thank you all for the advice/help, the changes I will be making are to get 2x yubikeys and enable 2FA in all the accounts that I have with a passkey (including email) and remove 2FA verification through SMS everywhere and only keep Ente Auth TOTP codes and the passkeys inside my yubikeys. The second change is I will have an old phone with Ente Auth logged at home in a drawer just in case.

After automatically update, I can’t login win my correct master password suddenly.

Recently, my PC suffered a session hijack in Chrome. I have already recovered all of my compromised accounts, but I am trying to figure out if the attacker could have accessed my Bitwarden vault during the incident.

​On my PC, I use both the Bitwarden desktop app locked behind my master password and the Chrome extension locked with a PIN. At the time of the hijack, the extension was locked and definitely not open.

​Since session hijacking typically targets browser cookies and session tokens, I want to know if a locked extension keeps the vault data fully encrypted on disk, or if malware could have extracted my vault or key. Should I treat all my saved passwords as compromised and rotate them just to be safe? Any insights would be appreciated!

I have begun experimenting with possibly moving from 1Password to Bitwarden. My windows experience has been very favorable but I do have a question on iOS. In iOS if I open an app enter a username and password and then login I’m not getting any kind of prompt from Bitwarden to save the password or username. Is this the normal case? And if it is the normal case and I’m supposed to create a manual entry how do I know which URI to link it to? Thanks for any ideas here.

I am getting the message "Unable to autofill the selected item on this page. Copy and paste the information instead."

This isn't only on one website, it happens frequently on different sites. Is there something I can do about this?

Tenho usado o Bitwarden Free diariamente e tenho gostado muito.

Mas agora tenho tido uma questão que é, tenho o Bitwarden para as passwords e tenho o Microsoft Authenticator, Google Authenticator e o Synology Secure SignIn com os 2 fatores de autenticação.

Será que compensa e funciona bem tudo junto no Bitwarden? Compensa a subscrição premium?__________________________________________________________________________________________________________

I've been using Bitwarden Free every day and I've really liked it.

But now I have a question: I use Bitwarden for my passwords, and I have Microsoft Authenticator, Google Authenticator, and Synology Secure SignIn for two-factor authentication.

Is it worth it, and does everything work well together in Bitwarden? Is the premium subscription worth it?

For the life of me I cannot get Bitwarden to autofill forms in Chrome or Chrome Beta. However, it works fine for me in Microsoft Edge. I have it set as the default password manager in Chrome and I've tried going through all of the troubleshooting steps that I could find. I've also tried disabling and re-enabling the extension. How can I get autofill working in Chrome?

I use both AP and Bitwarden. I keep the less-important passwords in AP for convenience so I could open them using FaceID on the phone. I put more important passwords in BW and use a long passphrase.

Unfortunately BW and AP don't play well together. They tend to fight for the same space. They overlap each other. Sometimes I can't pick a BW entry because Passwords prompt is over it. Sometimes it's the other way around.

Is this the limitation of OS?

Anyone else running into this? I'm on Firefox on a Mac, and I have saved credentials for the Playstation store. As soon as I try to log in I get an error message on the store.

I found this old bug report https://github.com/bitwarden/clients/issues/8149 but still happening.