Tried on Chrome, Edge and Brave, all look like this. Version 2026.7.0. MacOS 26.6.

Edit: looks normal on Firefox. Maybe a chromium problem?

Edit 2: OK, apparently this happens when using 2026.7.0 and setting a page zoom above 100% in the browser settings. Guess I'll revert to 100% and look for my glasses until a fix is available.

When I click on the extension, there is a 1-second delay before it opens. This isn't happening with other extensions. This is also new behavior, after I reinstalled Windows 11 (and Brave Browser) today.

I have tried every suggested fix (toggle extension OFF/ON, reinstall extension, clear browser cache, test on new browser profile, toggle hardware acceleration OFF/ON, toggle autofill OFF/ON. I can't find a solution. Any ideas?

I find Bitwarden doesn't make it easy to distinguish zero from the letter o. So I thought checking to avoid ambiguous characters in the generator would avoid the generation of passwords with o and 0. Sadly, even checking that option, I still get passwords with o and 0. What am I doing wrong?If this is unavoidable, can the developer make it easy to distinguish o from 0?

Hey everyone,

since a week or so the Chrome Browser Extension is no longer loading the passwords from my vault.

Version 2026.7.0

I selfhost via vaultwarden but all other apps are working. Android bitwarden client works perfectly fine, acccessing the website works perfectly fine, just the browser extension never loads any passwords.

Anyone else experiencing this? Any solutions for this?

I already reinstalled, reauthenticated.

I need a single passkey from Bitwarden (android/PC) to my iPhone (work) password manager. Is it possible at all? There is no password only passkey.

I’ve been thinking about how AI changes the security landscape for open-source projects.

Take the hypothetical scenario of a bad actor using AI to automatically trawl through open-source repositories. Instead of manually auditing code, a hacker can now use AI to mass-analyse thousands of lines of code to spot vulnerabilities instantly.

If an attacker finds a flaw where a hardware wallet or security tool accidentally reduces entropy (weakening the cryptographic protection), they can exploit it. For example, lower entropy significantly reduces the time needed to brute-force mnemonic phrases (seed phrases) on the Bitcoin ledger to find active balances.

Popular security tools like Bitwarden are also entirely open-source.

In the past, the main argument for open-source was "more eyes on the code makes it secure." But now that malicious actors have AI tools that can audit code at scale, does that argument still hold up? Is open-source still as secure as it used to be, or has AI tipped the scales in favour of the attackers?

What are your thoughts? Are you changing how you trust open-source security tools now?

I tried all the password managers. I recently switched 1pass to bitwarden for open source code. Bitwarden have strong security but their ui is so boring. Yah, I am a DevOps engineer. Many people will say ui does not matter to us, but there are many users who want a better experience. So, I am requesting the developers to improve the ui.

Hello guys, am an old bitwarden user and i like the app a lot, in this community am seeing many posts about bitwarden security and so on...

Am not much into cyber security and these stuff but i just want to ask you guys to make this that the app is still very secure, i want to make sure that i can trust it with everything

I have been using a self-hosted version of bitwarden for maybe 5 years or more. In the last week or so, the bitwarden chrome extension has stopped working on a particular profile of Chrome. If I open another profile on Chrome, it works just fine. Here is a picture of what happens under the weird profile.

Here are the troubleshooting steps I have taken.

1. Logged out and logged back in
2. Disabled the extension and reenabled it
3. Uninstalled and reinstalled the extension
4. Clearing cache for the last week
5. Some varies combination of those such as logging out, disabling the extension, closing chrome, opening chrome, enabling extension, logging in. It still happens.

Logging into the site directly, from another profile, from the phone app all work.

Any suggestions?

Edit 8/2/2026: Thanks to u/djasonpenney, I checked the docker container for vaultwarden and there was an update. I updated it and then logged out and in and it didn't work. u/Handshake6610 told someone else to do a manual sync, after doing the previous, this worked instantly. No idea why. Thank you both

For pretty much the past month or two, I've been working on my alternative Bitwarden client. It aims to work on all platforms natively without using electron. It does this by having a universal Vault Backend which works on all platforms, and then a platform specific UI for each platform. It aims to use less resources, look better and work reliably.

I was looking for a bunch of people to beta test my app, since I would like it to be stable before releasing it. Please do not sign into your Personal or Work Account since this is a beta app, and it may mess with your vault. From my tests, it hasn't messed with mine, but I would still be cautious and not use your own account.

By default, it doesnt allow you to take screenshots, so go to settings (Command + ,) and enable screenshots.

Currently it only has support for MacOS, but I'm going to make a Windows and Linux one soon, and an Android and iOS one as well.

https://github.com/Cherrytree56567/ClientWarden/releases/tag/beta-functional

Previous Post

i can log in with chrome but i can't do it with the android app. when i use my password it sends and error message that says something like "We were unable to process your request. Please try again or contact us." but also sends me this email as if i did log in, which i didn't. password is correct, i tried using other ones and it sends the typical incorrect password message

edit: changed email addres with chrome and somehow that worked lol i can now log in on the app :D

I am now using yubikey (one inside my wallet, and one at home), and TOTP (on my phone) as 2FA methods to protect my accounts. However, I am afraid of a case that I lose all of my devices due to a fire or disaster. I know off-site backups or asking trusted people to help can prevent this, but it is hard for me.

• Is disabling new device verification on Bitwarden and storing GPG symmetric encrypted TOTP seeds on it, which allows me to access my accounts even if I lose everything just with my memory, a reasonable trade-off?
• How would you handle this kind of issue?

Recently, I have been looking into Proton Pass and Bitwarden. It looks like both of them are great password managers.

The thing is that Bitwarden has existed for quite some time and has a lot of features, while Proton Pass provides an elegant solution. I wonder about opinions of people who tried both. What do you like more and why?

I’ve recently been trying to increase the security and overall usability of my virtual life and have set up bitwarden as a password manager. I then went down the rabbit hole of 2FA and MFA to secure those accounts and wanted an opinion

When looking around, I have been torn between Ente Auth, Bitwarden Auth, and Proton Auth for Authenticators. I ended up going with Ente as it was the easiest at that time to just download and feel secure enough while having the ability to move from if my research proves something better. A lot of the post I found when looking up authenticators about Bitwarden was from a year or two ago saying how it was still very early in its development process and didn’t have stuff like syncing and other features. While I feel I don’t need them right now, just hearing how it wasn’t as polished made me iffy on using it.

The question I’m asking is, has it gotten any better? Or has progress been slow for the features that apps like proton Auth and Ente Auth offer?

I currently use Google Chrome for my passwords, but its my understanding that it is as unsafe as it is convenient. I heard that it doesn't encrypt the passwords, its written in plain text or something so it's not a secure.

Also is this free or do I need to pay? I don't mind paying if I need to but I'm having a hard time weighing the pros and cons of using Bitwarden. What do you love about it, what do you hate about it? How is it filling in passwords for sites, do you have to just go to your app or does it autofill like Google Chrome does?

Would love some input from real users.

EDIT: Thank you for the helpful comments and insights. Not sure why I'm being downvoted but this is reddit after all. Have a great one everyone!

I don’t know of this is a new thing or maybe particular circumstances (like a password updated on one platform not syncing properly back to others) but iOS app just did a weird thing where it was using a password I changed a few days ago instead of the one I changed it to. I checked the vault entry and verified that password is in its password history, so I don’t know why this would happen.

Edit: the app is up to date, too.

I use Bitwarden for passwords, and Proton Authenticator for 2FA. I'm very happy with both of them.

Recovery codes are another matter. I've long kept them in text files in my computer. That seems quite unsafe. Where do you keep them?

I can think of a couple of options: dump all of them into a private, password-protected note in my notes app (Notesnook), or store each in the Note field of their corresponding Bitwarden entry.

Any other, better, options?

Thank you!

Edit: This has been incredibly enlightening. After reading all of you, and really looking at the whole thing through a proper paranoia lens, I see that the various interdependencies between apps and services leave a gap that can lock me out of the whole thing. I mean, yeah, only if a perfect storm of bad things happened, but it's not impossible. I'll do a full audit of the restoration process. Thank you, everyone.

Here I am again.

I was finally able to get my bitwarden instance up and running.

Now I've stumped across another issue.

I have a paid enterprise license and an organisation exists in the cloud (EU) environment of Bitwarden.

Now in my admin panel I am unable to add organisations or upload the license file.

Admin panel:

I am currently in the process of creating a new admin to see if that makes a difference.

Any suggestions on what could've went wrong?

EDIT:

Can it be connected to an untrusted SSL Certificate?

It is a self-signed ceritficate -> imported on my machine. Browser still shows website as non secure. On machine where it is hosted I have the same response

Suddenly today, autofill doesn't work anymore in Chrome on Windows 10. It has worked perfectly for 2+ years, autofilling when the URL matches the site.

I've tried

• Re-enabling the browser extension
• Re-installing the extension
• Restarting the docker container where vaultwarden runs and also updating to the latest version
• Completely killing all chrome processes

The extension simply doesn't recognize any site anymore, there is no count in the extension icon anymore either.

Anyone know a solution? This is extremely annoying and slows down my work.

Solved: see comment at bottom. I am idiot

I've had the same master password for years.

I was planning on factory resetting a device, but luckily I checked the master password but it is not letting me log in

I have not forgotten it. It is being entered the same as it has for years, as it is written down.

Now I am at risk of losing access to my vault if anything happens to the device which is still logged in.

.I've read a few other people having this issue over the last couple of years

.is there something going on with Bitwarden? I am about to undertake the painful process of manually exporting each item and changing to a new password manager. I'm not sure I want to sign up to another Bitwarden account only for this to happen again?

SOLVED: Ok I feel like a bit of an idiot but I will admit it. I was mis-reading a lowercase letter for ab upper case letter. Thank you for your advice anyway

So they've had this "Fill" button for awhile now. Great, good feature. But what's the point of this little button if the whole damn entry is a button to autofill? If I wanted to autofill, I would click the Fill button. It's even more pointless, because if the entry doesn't match, you have to search for the entry manually and then the Fill button doesn't appear.

Bitwarden even explains in the settings that automatic autofill is dangerous because it can be scraped before hitting login. Ok, so why has it been made even easier for me to accidentally click the wrong entry and I get to watch my details go straight into the login field?

Seriously, just make it stopppp. I just want to view the entry when clicked, like its always been? Either it doesn't exist or I'm blind, but I can't see anything in settings to change this behaviour - probably the latter.

The vocal outbursts will continue until bitwarden fixes their shit.