github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-07-20 01:17:58 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[GH-ISSUE #6918] Authenticator App - Show my Key instead of username and Ghost TOTP for synced login from Bitwarden App #127803

New Issue
Closed
opened 2026-06-13 21:14:11 -05:00 by GiteaMirror · 3 comments
GiteaMirror commented 2026-06-13 21:14:11 -05:00
Owner
Copy Link
Copy Source

Originally created by @imadeput0287 on GitHub (May 14, 2026).
Original GitHub issue: https://github.com/bitwarden/android/issues/6918

Steps To Reproduce

A. Input a Login with TOTP key included, allow sync to Authenticator. Open Authenticator, it display Item Name, TOTP key (this is serious security issue) and TOTP Auth

B. Input a Login without TOTP key, allow sync to Authenteicator. Open Authenticator, it display item name, username and TOTP auth

Expected Result

A. Authenticator display Item Name, username and TOTP auth

B. Authenticator display nothing

Actual Result

It included on step to reproduce

Screenshots or Videos

It display my TOTP key, so unable to share it.

Additional Context

No response

Build Version

Latest 2026.04.1

What server are you connecting to?

US

Self-host Server Version

No response

Environment Details

I'm using poco f7 and xiaomi tab 7 with android 16

Issue Tracking Info

  • I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
Originally created by @imadeput0287 on GitHub (May 14, 2026). Original GitHub issue: https://github.com/bitwarden/android/issues/6918 ### Steps To Reproduce A. Input a Login with TOTP key included, allow sync to Authenticator. Open Authenticator, it display Item Name, TOTP key (this is serious security issue) and TOTP Auth B. Input a Login without TOTP key, allow sync to Authenteicator. Open Authenticator, it display item name, username and TOTP auth ### Expected Result A. Authenticator display Item Name, username and TOTP auth B. Authenticator display nothing ### Actual Result It included on step to reproduce ### Screenshots or Videos It display my TOTP key, so unable to share it. ### Additional Context _No response_ ### Build Version Latest 2026.04.1 ### What server are you connecting to? US ### Self-host Server Version _No response_ ### Environment Details I'm using poco f7 and xiaomi tab 7 with android 16 ### Issue Tracking Info - [x] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
GiteaMirror added the bugapp:authenticator labels 2026-06-13 21:14:11 -05:00
GiteaMirror commented 2026-06-13 21:14:14 -05:00
Author
Owner
Copy Link
Copy Source

@bitwarden-bot commented on GitHub (May 14, 2026):

Thank you for your report! We've added this to our internal board for review.
ID: BWA-259

<!-- gh-comment-id:4449776086 --> @bitwarden-bot commented on GitHub (May 14, 2026): Thank you for your report! We've added this to our internal board for review. ID: [BWA-259](https://bitwarden.atlassian.net/browse/BWA-259) [BWA-259]: https://bitwarden.atlassian.net/browse/BWA-259?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ
GiteaMirror commented 2026-06-13 21:14:14 -05:00
Author
Owner
Copy Link
Copy Source

@pamperer562580892423 commented on GitHub (May 14, 2026):

I think the fix for this (see https://github.com/bitwarden/android/issues/6833 / https://github.com/bitwarden/android/issues/6526) is not included in 2026.4.1 yet...

<!-- gh-comment-id:4450345837 --> @pamperer562580892423 commented on GitHub (May 14, 2026): I think the fix for this (see https://github.com/bitwarden/android/issues/6833 / https://github.com/bitwarden/android/issues/6526) is not included in 2026.4.1 yet...
GiteaMirror commented 2026-06-13 21:14:14 -05:00
Author
Owner
Copy Link
Copy Source

@Krychaz commented on GitHub (May 14, 2026):

Hello,

This is a duplicate issue of #6833. Fix for that issue should be released within the next update.

<!-- gh-comment-id:4450642104 --> @Krychaz commented on GitHub (May 14, 2026): Hello, This is a duplicate issue of #6833. Fix for that issue should be released within the next update.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No labels app:authenticator bug
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#127803