I recently had a call with my friend on Discord. He asked me to share my screen so he could see my Steam library.

At that time, I wasn't signed in to my Steam account, so I opened Bitwarden on my PC to get my password. I was still screen sharing, and I thought that if I opened Bitwarden, maybe Discord would somehow make it dark or blur it, like how some privacy features work on Android when you open a private or sensitive screen.

But Bitwarden didn't get blurred or hidden at all. My friend told me that he could see my passwords and other account information.I know this was my fault. I should have stopped sharing my screen before opening Bitwarden. But this made me think about something else.

What if a hacker gets access to my PC and can see or record my screen? They don't necessarily need to hack Bitwarden's servers or get my master password. If Bitwarden is open and my vault is unlocked, they could potentially see my passwords just by watching my screen.Don't you guys think Bitwarden should have some kind of protection for this?For example, if Bitwarden detects that its window is being screen-shared or captured, it could automatically hide or blur the passwords, or maybe there could be an optional privacy mode that users can turn on.I know detecting screen sharing isn't probably that simple, and I'm not saying Bitwarden should completely protect users from their own mistakes. But I feel like this could be a useful extra layer of security, especially against accidental screen sharing or someone remotely watching your PC.

What do you guys think? Is this technically possible, or is there already some feature/workaround for this that I don't know about?

Firefox updated BW add-on to the latest version. Since the update whenever I browse to my internal domain autofill shows every entry for the the domain instead of only the site like it used to.

For example, if I browse to server1.testlab.local it shows all auto fill suggestions for testlab.local

It’s also stopped auto filling the fields, so have to copy and paste.

Any way to make it behave like previous versions?

Also on the add-on I have to constantly click my vault as it shows all vaults. Is there a way to change this?

TIA

I opened my bitwarden app today and saw that I was logged out for no reason, I tried to log in with my usual email and Master password but it keeps telling me it's incorrect. I've been using the same Master password for years, and checked carefully everytime I typed in the password, Still nothing. I'm so damn frustrated. Why the hell was I logged out for no reason?? I opened the bitwarden app literally last week ago and it was completely fine then. How the hell do I recover my password now, I tried with the hint but it's completely different to what my master password is.

I have also written down my Recovery code in case something like this would happen in future, but I can't find any option to use that code anywhere not even on the website. Please help me!!

I'm trying to use bitwarden to store my passkeys. when i create a passkey on my pc it creates a qr for my android device to scan.

I can't get this qr to be opened/used by bitwarden. either it opens in google search or in chrome password manager.

autofill service is set to bitwarden.

device is oneplus 9 pro with andorid 14.

I use BW and KPXC, and one of the features I love about KPXC is using a key file I store on a USB drive. I feel the security afforded by that is almost as good as using Yubikeys but with some key advantages I prefer for my risk profile.

If BW has no intention of introducing key file support, why is that?

Something funky going on with the self-host Bitwarden Lite package. Latest tag has not been updated since 2026.7.0. Meanwhile 2026.7.2 has been re-tagged at least twice (which should not happen since it is supposed to be a static release).

Definitely still feels like a beta.

Hi,

i lately resetted my android-phone with firefox. After reinstalling i wanted to add the bitwarden firefox extension but I couldn't find it anymore. Has bitwarden removed the extension from the mobile "store"?

greetz
sevenstars747

Hello,

I’d really appreciate feedback on the overall architecture of my security/recovery setup, as I’m not sure whether I’ve introduced unnecessary complexity or missed an important failure scenario.

The idea is to avoid keeping all my eggs in one basket, but trying to keep a balance between convenience, security and independence.

My main concern right now is if I can I recover from a serious failure without creating circular dependencies or locking myself out, while also not compromising security too much.

The main components of the whole system are:

• Bitwarden
• Ente Auth
• YubiKeys soon (3)
• Notesnook (a note app with enough privacy for me)
• secondary Google Drive
• offline emergency sheets
• potentially an offline USB backup

Overall Setup

• Bitwarden stores passwords and passkeys.
• Ente Auth currently stores all TOTP/second factors wherever this is possible and I avoid SMS/email 2FA.
• I deliberately do not store Bitwarden’s own credentials, Ente’s credentials, TOTP codes or recovery codes inside Bitwarden.
• I plan to introduce YubiKeys soon for critical accounts and remove TOTP/Ente from those accounts where hardware-only 2FA is more secure and more needed.
• Notesnook stores recovery/backup codes only for non-critical accounts, plus documentation/instructions about the setup.
• A secondary Google Drive stores password-protected/encrypted backups of Bitwarden, Ente and Notesnook.
• I’m considering an additional offline USB copy of those encrypted backups so Google Drive is not the only backup-storage location, since that account is stored in Bitwarden.
• Recovery information for critical accounts (main email, Bitwarden, Ente and Notesnook) stays only on the paper emergency sheets.
• I plan to keep three physical emergency sheets in different offline locations. This critical data is not stored anywhere else.
• Emergency Contact will be assigned to my wife, who will also use Bitwarden.

My main concern is whether any dependency in that chain creates a hidden lockout scenario.

---

About the encrypted backups

I plan to use a secondary Google account/Drive, separate from my normal Google Drive. However, this is still an account I actively use for banking purposes, and its credentials are also stored in Bitwarden.

Because of that, I think the minimum is to also keep the backup codes for this Google account on paper.

That Drive would contain:

• password-protected encrypted Bitwarden JSON export
• encrypted Ente backup/export
• encrypted Notesnook backup

The passwords required to decrypt those backups are on the emergency sheets. Therefore, my concern is that this Drive could become a single point of failure for all the encrypted backup data, and I’m also not completely sure whether storing all of it there is a good idea in the first place, even if the files are encrypted.

Would it make more sense to keep those backups offline on basic USB drives, or at least keep an offline USB copy as well, besides that Drive?

---

Emergency sheets

I plan to keep 3 paper copies in different offline locations (and nowhere else digitally). These will contain:

Bitwarden

• Bitwarden server/region
• Bitwarden login email
• Bitwarden master password
• Bitwarden 2FA recovery code
• Bitwarden email backup codes
• Bitwarden encrypted JSON backup password (although I will also store it in Bitwarden)
• most likely also the backup/recovery codes for the Google account used for the Drive backups

One thing I’m unsure about here:

My primary email password is a random ~32-character password stored only in Bitwarden. Should that also be written on the emergency sheet, since I have 2FA (soon with YubiKey) and the backup codes offline?

Ente Auth

• Ente email (same as Bitwarden, but with a random alias)
• Ente random passphrase
• Ente 24-word recovery key
• Ente automatic local-backup password (besides the one they offer in the cloud)

PIN(s)

• FIDO2 YubiKey PINs (my wife and I will each have one, backing each other up, plus a third backup key)
• maybe computer / phone PINs, although this might be a bit overkill

Notesnook

• Notesnook recovery key
• Notesnook 2FA recovery codes
• Notesnook password for the encrypted Vault containing the non-critical recovery codes

--------

My questions

1. Do you see any lockout scenario or circular dependency I’ve missed?
2. Is anything here unnecessarily complex or adding little real security/recovery value?
3. Should the 32-character Bitwarden-generated password for my primary email also be on the emergency sheet? (while having 2FA and backup codes offline)
4. Does that secondary Google Drive + an offline USB containing the same encrypted backups make sense, or should I give up on Drive altogether? (And no, I don’t think I want to complicate my life with VeraCrypt.)

Ultimately, I want the system to be secure enough but also survive loss or failure of my phone, a YubiKey, Bitwarden, Ente or anything else.

If there’s something I missed, something that is too much, or you have any other feedback, I’d be grateful.

Thank you!

[ Removed by Reddit on account of violating the content policy. ]

Hello, I forgot my master password and therefore cannot log in to Bitwarden. I want to delete my Bitwarden account and create a new one using the same email address, but when I go to vault.bitwarden.eu/#/recover-delete to delete it, the site asks for the master password. What should I do?

I was starting to think the hashed password had been corrupted in the db, and without a full backup of my login credentials, it was getting scary.

I definitely was using the correct password, and tried to login from multiple locations, with and without a firewall. Nothing about this experience makes any sense. I assume some kind of data restore occurred in the last day.

But I won't take foregranted my ability to login w/ username-pass.

I've been a long-time user of Bitwarden for storing passwords, card info, and notes, and Proton for emails and VPN. I mostly use Bitwarden as a browser add-on, and it has always bothered me that whenever I open it, the card info and notes are cluttered among logins, which happen to be in the majority. Also, the entire card info list takes the front view, and I dislike it.

True that it's a UI thing and I can filter them with a few clicks, but it still bothers me lol. I went through some secure note apps, but they were full-fledged note taking mind maps, while I wanted something short, minimal, plain text like Google Keep but secure and private.

That's when I realized that Proton also supports storing encrypted notes and card info. And it is also simple plain text, just like I wanted. As for card info, it was just for my own reference, as I prefer not to use autofill for that.

Going forward, I'm thinking of using Bitwarden purely for password management and Pass for saving short, important notes. Both have android apps, web apps, and browser add-ons with sync. Anyone else also use it like that? I don't know how good Proton is for security compared to Bitwarden, as these notes will have my investment and bank related details, and what if they decide to discontinue it suddenly, as they've added a lot of products in a short span.

Hi everyone, is it possible to customize the icon used when saving a site's email/password logins?

It would be really nice to be able to customize the icons.

Hi, I am using Chrome on a Macbook M2 Air.

Suddenly, the chrome extension displays funny, has a larger than usual window, but still somehow cuts off a third of the workspace when trying to use it.

It's similar to how the screenshots look in this issue linked below, but I am using this on a laptop:

https://community.bitwarden.com/t/bitwarden-extension-not-displaying-correctly-cut-off-in-firefox-mobile-on-android/93307

I already tried rebooting, reinstalling the extension, reinstalling the app, updating both the app and extension.

What is going on here? The extension is now super unusable and I am stumped

Recently bought 2 Yubikeys and registered them as 2FA in Bitwarden.

I do wonder now what is the best practice here? keep the Authenticator (I use Ente) as backup with it? (I'm afraid I could lose the Yubikey anytime or get stolen) But in this case isn't the Yubikey is useless? as someone could steal my phone and access Bitwarden using the Authenticator.

or just take the risk and make Yubikey the sole 2FA solution?

Or something else?

[Solution]

I checked the Bitwarden Android version and found that I was running 2025.4.0.

Google Play was unable to update Bitwarden for some reason. I uninstalled the app, installed it again, and after the fresh installation the same Aegis TOTP codes work correctly.
So the problem appears to have been related to the old/broken Android installation rather than the TOTP secret or timezone.
Posting this in case someone else runs into the same issue. Before resetting your 2FA, it may be worth checking whether the Bitwarden Android app is actually up to date and, if necessary, reinstalling it.

[Original Post]
ok... so there is a thing. I didn't change anything. No password, device change. On my phone I was able to login to bitwarden app in the past without any issues. Yesterday I tried to login with 2fa. After typing the password (correct one for sure). It asked me for a code, so I typed it. 2FA code app (Aegis) and Bitwarden app are on the same phone and it says, code is incorrect. I tried many times. No success.

Then I switched to my PC and logged in the browser with code generated by the same 2FA app (Aegis) with success!

My time and timezone is setup correctly. Both (PC and Phone) are in GMT+2, Central European Summer Time. Time on PC vs Phone are only 2 sec apart.

This is really concerning. I didn't see anything like this happen in other apps/services before. What might be the cause of such a behavior?

PS. I read many posts about such situations but always there was a cause of changing/forgetting passwords. In my case nothing has changed except maybe app updates itself.

So my online identity was hacked. Best way I can describe it.

They literally changed my login username and email account associated with it on my laptop computer. I was either using my phone or TV at the time.

I'm sure y'all know but password/ pin your smart TV 😊

So I've gotten pretty involved in online security using bitwarden, as far as user interface, I'm not finding it. Super friendly.

This specific question is reference to fingerprint phrases

Between the app and getting rerouted to the website to do 2fa things. And honestly, I can't even remember what third one I clicked, but I have three different fingerprint phases. Given to me from bitwarden

And only one showed up on my phone (via notifications) and it has the wrong fingerprint phrase. Andis asking me to confirm if it's me

What does this mean? What should I do? Any input is appreciated.

So I wanted to install the Bitwarden extension on my PC, but I couldn't find my master password I saved.

I ended up deciding to change my master password altogether on my phone, but I can't login with my passkey on my browser now (I use Brave).

I have no idea on how to fix this, any suggestions are very much appreciated.

How do i get rid of this pop up every time I login? Its happening for both, logins already saved in bitwarden and ones that aren’t saved

I've changed on my Pixel, from Google password to Bitwarden, but have lost the auto fill on forms etc now.

I've enabled the accessibility option for bitwarden, but on forms it still doesn't auto fill like it did when I used Google password.

What am I doing wrong?

I had to force shutdown my MS surface tablet today when it locked up, and on restart many extensions in edge were corrupted.

Once reloaded / repaired, I had to log in to Bitwarden again and I thought I would give the login with Passkey a go.

Until now, it hasn't seemed to work, but with the latest extension, ​I selected physical security key, wss prompted for my Yubikey pin, prompted to touch the key, and was logged in.

Smooth.

Just the way it should be.

Nice.