iOS apps crash after submitting a master password (only for entries that have Master Password Reprompt) #1707

Closed
opened 2025-11-26 22:55:55 -06:00 by GiteaMirror · 17 comments
Owner

Originally created by @konstantin-f13 on GitHub (Aug 29, 2023).

Steps To Reproduce

  1. Open any entry that has Master Password Reprompt.
  2. Click on 'Edit' or a watch button on hidden fields (an eye icon), or "Delete".
  3. Type a master password (either correct or incorrect) as requested.
  4. Click on 'Submit'.

Expected Result

Expected results depend on the action of the step 2 (Steps To Reproduce) - screen for editing is displayed/hidden value is displayed/list of items in folder after deletion of item is displayed. Most importantly, the app doesn't crash.

Actual Result

App crashes.

Screenshots or Videos

No response

Additional Context

Everything has worked correctly till today when I updated iOS apps on iPhones and an iPad to version 2023.8.0. Interestingly, I can still copy passwords protected by the master password without crashes after inputting a master password. Logging out, reinstallation, logging in again - doesn't help. At the same time, web and desktop app works without issues.

Operating System

iOS

Operating System Version

iOS 16.6 (iPhone 8, iPhone 13), iOS 15.7.8 (iPad Air 2)

Device

iPhone 8, iPhone 13, iPad Air 2

Build Version

2023.8.0 (4566)

Beta

  • Using a pre-release version of the application.
Originally created by @konstantin-f13 on GitHub (Aug 29, 2023). ### Steps To Reproduce 1. Open any entry that has Master Password Reprompt. 2. Click on 'Edit' or a watch button on hidden fields (an eye icon), or "Delete". 3. Type a master password (either correct or incorrect) as requested. 4. Click on 'Submit'. ### Expected Result Expected results depend on the action of the step 2 (Steps To Reproduce) - screen for editing is displayed/hidden value is displayed/list of items in folder after deletion of item is displayed. Most importantly, the app doesn't crash. ### Actual Result App crashes. ### Screenshots or Videos _No response_ ### Additional Context Everything has worked correctly till today when I updated iOS apps on iPhones and an iPad to version 2023.8.0. Interestingly, I can still copy passwords protected by the master password without crashes after inputting a master password. Logging out, reinstallation, logging in again - doesn't help. At the same time, web and desktop app works without issues. ### Operating System iOS ### Operating System Version iOS 16.6 (iPhone 8, iPhone 13), iOS 15.7.8 (iPad Air 2) ### Device iPhone 8, iPhone 13, iPad Air 2 ### Build Version 2023.8.0 (4566) ### Beta - [ ] Using a pre-release version of the application.
GiteaMirror added the bug label 2025-11-26 22:55:55 -06:00
Author
Owner

@konstantin-f13 commented on GitHub (Aug 29, 2023):

Used KDF algorithm - PBKDF2 SHA256, KDF iterations - 600000.
Server - EU.

@konstantin-f13 commented on GitHub (Aug 29, 2023): Used KDF algorithm - PBKDF2 SHA256, KDF iterations - 600000. Server - EU.
Author
Owner

@jtodddd commented on GitHub (Aug 29, 2023):

Hi there,

Thank you for your report!

I was able to reproduce this issue, and I have flagged this to our engineering team.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

Thanks once again!

@jtodddd commented on GitHub (Aug 29, 2023): Hi there, Thank you for your report! I was able to reproduce this issue, and I have flagged this to our engineering team. If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these. Thanks once again!
Author
Owner

@aikideshi commented on GitHub (Aug 29, 2023):

Yup. Haven't been able to use bitwarden for the past couple days. Still can't. Had to be near a PC and manually type in passwords from PC whenever I need to login at the moment. So forced to look into other password managers as I'm stuck. Any ETA on a fix? Thanks

@aikideshi commented on GitHub (Aug 29, 2023): Yup. Haven't been able to use bitwarden for the past couple days. Still can't. Had to be near a PC and manually type in passwords from PC whenever I need to login at the moment. So forced to look into other password managers as I'm stuck. Any ETA on a fix? Thanks
Author
Owner

@konstantin-f13 commented on GitHub (Aug 30, 2023):

Hi there.

I would like to add, that after I reported the bug, I switched the key derivation function from PBKDF2 to Argon2 with default settings in order to check if the bug is reproduced with these settings. However, it didn’t help and I still experience the same problems - in some cases it's a crash and in some cases it's absolute no action – for example, after submitting a master password in order to watch the hidden values in secure notes.

Also, in the initial description I mentioned that I can still copy hidden passwords protected by Master Password Reprompt. My bad, copying is not working - the app isn't crashing in this case, however, I cannot paste a copied value anywhere.

Could we know the ETA on a fix? This bug has substantially limited the use of the iOS apps because most of my entries have Master Password Reprompt.

@konstantin-f13 commented on GitHub (Aug 30, 2023): Hi there. I would like to add, that after I reported the bug, I switched the key derivation function from PBKDF2 to Argon2 with default settings in order to check if the bug is reproduced with these settings. However, it didn’t help and I still experience the same problems - in some cases it's a crash and in some cases it's absolute no action – for example, after submitting a master password in order to watch the hidden values in secure notes. Also, in the initial description I mentioned that I can still copy hidden passwords protected by Master Password Reprompt. My bad, copying is not working - the app isn't crashing in this case, however, I cannot paste a copied value anywhere. Could we know the ETA on a fix? This bug has substantially limited the use of the iOS apps because most of my entries have Master Password Reprompt.
Author
Owner

@cstreit03 commented on GitHub (Aug 31, 2023):

I’m also experiencing the same issue on my iPhone 14. However, I am also unable to edit them to turn off the option to prompt for the master password. It works fine on PC, but myself and most people use mobile apps more frequently. Any ETA of a fix?

@cstreit03 commented on GitHub (Aug 31, 2023): I’m also experiencing the same issue on my iPhone 14. However, I am also unable to edit them to turn off the option to prompt for the master password. It works fine on PC, but myself and most people use mobile apps more frequently. Any ETA of a fix?
Author
Owner

@konstantin-f13 commented on GitHub (Aug 31, 2023):

After updating a desktop app on Windows 10 to version 2023.8.2 I now cannot view or edit any reprompt requiring entries here as well. Plz fix the bug:)

@konstantin-f13 commented on GitHub (Aug 31, 2023): After updating a desktop app on Windows 10 to version 2023.8.2 I now cannot view or edit any reprompt requiring entries here as well. Plz fix the bug:)
Author
Owner

@aikideshi commented on GitHub (Aug 31, 2023):

Same here. Doesn't work for me on Windows as well. Will this be fixed soon?

On Thu, Aug 31, 2023 at 10:46 PM konstantin-f13 @.***>
wrote:

After updating a desktop app on Windows 10 to version 2023.8.2 I now
cannot view or edit any reprompt requiring entries here as well. Plz fix
the bug:)


Reply to this email directly, view it on GitHub
https://github.com/bitwarden/mobile/issues/2733#issuecomment-1700974438,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AMQLSR6RC6L7XGQ7TX5NJFLXYCBTPANCNFSM6AAAAAA4C7IBNQ
.
You are receiving this because you commented.Message ID:
@.***>

@aikideshi commented on GitHub (Aug 31, 2023): Same here. Doesn't work for me on Windows as well. Will this be fixed soon? On Thu, Aug 31, 2023 at 10:46 PM konstantin-f13 ***@***.***> wrote: > After updating a desktop app on Windows 10 to version 2023.8.2 I now > cannot view or edit any reprompt requiring entries here as well. Plz fix > the bug:) > > — > Reply to this email directly, view it on GitHub > <https://github.com/bitwarden/mobile/issues/2733#issuecomment-1700974438>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AMQLSR6RC6L7XGQ7TX5NJFLXYCBTPANCNFSM6AAAAAA4C7IBNQ> > . > You are receiving this because you commented.Message ID: > ***@***.***> >
Author
Owner

@liqfx commented on GitHub (Sep 2, 2023):

Just adding to this that I’m experiencing this as-well on iOS.

@liqfx commented on GitHub (Sep 2, 2023): Just adding to this that I’m experiencing this as-well on iOS.
Author
Owner

@weedy commented on GitHub (Sep 2, 2023):

I'm on Android and updated a couple hours ago.

Same thing, anything with Reprompt turned on crashes everything. I had to load the website to get to my things, or turn off Reprompt.

@weedy commented on GitHub (Sep 2, 2023): I'm on Android and updated a couple hours ago. Same thing, anything with Reprompt turned on crashes everything. I had to load the website to get to my things, or turn off Reprompt.
Author
Owner

@konstantin-f13 commented on GitHub (Sep 3, 2023):

As mentioned in a comment in a similar bug report, we can bypass this bug and get access to our entries by the following:

When you are already in your vault opened with the help of the PIN:

  1. turn off PIN code option for logging into the app.
  2. lock the vault and unlock it with a Master Password.
  3. open/edit/copy protected entries or fields with Master Password Reprompt.

This solution actually discouraged me from temporary migration to another password manager. I have tested this on Desktop (windows 11) and iOS (iPhones 8 & 13).

@konstantin-f13 commented on GitHub (Sep 3, 2023): As mentioned in a [comment](https://github.com/bitwarden/clients/issues/6176#issuecomment-1703848868) in a similar bug report, we can bypass this bug and get access to our entries by the following: When you are already in your vault opened with the help of the PIN: 1. turn off PIN code option for logging into the app. 2. lock the vault and unlock it with a Master Password. 3. open/edit/copy protected entries or fields with Master Password Reprompt. This solution actually discouraged me from temporary migration to another password manager. I have tested this on Desktop (windows 11) and iOS (iPhones 8 & 13).
Author
Owner

@Mihier-Roy commented on GitHub (Sep 3, 2023):

Wanted to add that I'm facing the same problem on Android: Version: 2023.8.0 (7466)

@Mihier-Roy commented on GitHub (Sep 3, 2023): Wanted to add that I'm facing the same problem on Android: Version: 2023.8.0 (7466)
Author
Owner

@aikideshi commented on GitHub (Sep 3, 2023):

Can't even log in because it crashes after I key in password. So currently
totally unusable for me

On Sun, Sep 3, 2023 at 5:26 PM konstantin-f13 @.***>
wrote:

As mentioned in a comment
https://github.com/bitwarden/clients/issues/6176#issuecomment-1703848868
in a similar bug report, we can bypass this bug and get access to our
entries by the following:

When you are already in your vault opened with the help of the PIN:

  1. turn off PIN code option for logging into the app.
  2. lock the vault and unlock it with a Master Passoword.
  3. open/edit/copy protected entries or fields with Master Password
    Reprompt.

This solution actually discouraged me from temporary migration to another
password manager. I have tested this on Desktop (windows 11) and iOS
(iPhones 8 & 13).


Reply to this email directly, view it on GitHub
https://github.com/bitwarden/mobile/issues/2733#issuecomment-1704035193,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AMQLSRZMSFSUKGQVINEU5QLXYQWLXANCNFSM6AAAAAA4C7IBNQ
.
You are receiving this because you commented.Message ID:
@.***>

@aikideshi commented on GitHub (Sep 3, 2023): Can't even log in because it crashes after I key in password. So currently totally unusable for me On Sun, Sep 3, 2023 at 5:26 PM konstantin-f13 ***@***.***> wrote: > As mentioned in a comment > <https://github.com/bitwarden/clients/issues/6176#issuecomment-1703848868> > in a similar bug report, we can bypass this bug and get access to our > entries by the following: > > When you are already in your vault opened with the help of the PIN: > > 1. turn off PIN code option for logging into the app. > 2. lock the vault and unlock it with a Master Passoword. > 3. open/edit/copy protected entries or fields with Master Password > Reprompt. > > This solution actually discouraged me from temporary migration to another > password manager. I have tested this on Desktop (windows 11) and iOS > (iPhones 8 & 13). > > — > Reply to this email directly, view it on GitHub > <https://github.com/bitwarden/mobile/issues/2733#issuecomment-1704035193>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AMQLSRZMSFSUKGQVINEU5QLXYQWLXANCNFSM6AAAAAA4C7IBNQ> > . > You are receiving this because you commented.Message ID: > ***@***.***> >
Author
Owner

@liqfx commented on GitHub (Sep 3, 2023):

Yea this needs to be addressed urgently at the moment can’t auto fill half my passwords when on mobile.

@liqfx commented on GitHub (Sep 3, 2023): Yea this needs to be addressed urgently at the moment can’t auto fill half my passwords when on mobile.
Author
Owner

@ManassesM commented on GitHub (Sep 5, 2023):

I was able to reproduce it on Samsung S20FE Android 13 as well.

@ManassesM commented on GitHub (Sep 5, 2023): I was able to reproduce it on Samsung S20FE Android 13 as well.
Author
Owner

@aikideshi commented on GitHub (Sep 7, 2023):

Still stranded, still can't get access to my passwords. Is there any update
on this? Thanks

On Thu, Sep 7, 2023 at 2:30 AM mpbw2 @.***> wrote:

Closed #2733 https://github.com/bitwarden/mobile/issues/2733 as
completed.


Reply to this email directly, view it on GitHub
https://github.com/bitwarden/mobile/issues/2733#event-10298202655, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AMQLSR2B6P62GVC24E4UMLLXZCQKNANCNFSM6AAAAAA4C7IBNQ
.
You are receiving this because you commented.Message ID:
@.***>

@aikideshi commented on GitHub (Sep 7, 2023): Still stranded, still can't get access to my passwords. Is there any update on this? Thanks On Thu, Sep 7, 2023 at 2:30 AM mpbw2 ***@***.***> wrote: > Closed #2733 <https://github.com/bitwarden/mobile/issues/2733> as > completed. > > — > Reply to this email directly, view it on GitHub > <https://github.com/bitwarden/mobile/issues/2733#event-10298202655>, or > unsubscribe > <https://github.com/notifications/unsubscribe-auth/AMQLSR2B6P62GVC24E4UMLLXZCQKNANCNFSM6AAAAAA4C7IBNQ> > . > You are receiving this because you commented.Message ID: > ***@***.***> >
Author
Owner

@nitrocode commented on GitHub (Sep 11, 2023):

For what it's worth, you can downgrade (Android only probably) to v2023.7.0 and it no longer crashes on creds with password reprompt. I'll keep my version pinned by disabling auto updates until the next release.

@nitrocode commented on GitHub (Sep 11, 2023): For what it's worth, you can downgrade (Android only probably) to [v2023.7.0](https://github.com/bitwarden/mobile/releases/tag/v2023.7.0) and it no longer crashes on creds with password reprompt. I'll keep my version pinned by disabling auto updates until the next release.
Author
Owner

@meilluer commented on GitHub (Oct 14, 2023):

Steps To Reproduce

  1. Open any entry that has Master Password Reprompt.
  2. Click on 'Edit' or a watch button on hidden fields (an eye icon), or "Delete".
  3. Type a master password (either correct or incorrect) as requested.
  4. Click on 'Submit'.

Expected Result

Expected results depend on the action of the step 2 (Steps To Reproduce) - screen for editing is displayed/hidden value is displayed/list of items in folder after deletion of item is displayed. Most importantly, the app doesn't crash.

Actual Result

App crashes.

Screenshots or Videos

No response

Additional Context

Everything has worked correctly till today when I updated iOS apps on iPhones and an iPad to version 2023.8.0. Interestingly, I can still copy passwords protected by the master password without crashes after inputting a master password. Logging out, reinstallation, logging in again - doesn't help. At the same time, web and desktop app works without issues.

Operating System

iOS

Operating System Version

iOS 16.6 (iPhone 8, iPhone 13), iOS 15.7.8 (iPad Air 2)

Device

iPhone 8, iPhone 13, iPad Air 2

Build Version

2023.8.0 (4566)

Beta

  • Using a pre-release version of the application.

Here a temporary fix https://www.reddit.com/r/Bitwarden/comments/164eg71/comment/jznf5oj

@meilluer commented on GitHub (Oct 14, 2023): > ### Steps To Reproduce > 1. Open any entry that has Master Password Reprompt. > 2. Click on 'Edit' or a watch button on hidden fields (an eye icon), or "Delete". > 3. Type a master password (either correct or incorrect) as requested. > 4. Click on 'Submit'. > > ### Expected Result > Expected results depend on the action of the step 2 (Steps To Reproduce) - screen for editing is displayed/hidden value is displayed/list of items in folder after deletion of item is displayed. Most importantly, the app doesn't crash. > > ### Actual Result > App crashes. > > ### Screenshots or Videos > _No response_ > > ### Additional Context > Everything has worked correctly till today when I updated iOS apps on iPhones and an iPad to version 2023.8.0. Interestingly, I can still copy passwords protected by the master password without crashes after inputting a master password. Logging out, reinstallation, logging in again - doesn't help. At the same time, web and desktop app works without issues. > > ### Operating System > iOS > > ### Operating System Version > iOS 16.6 (iPhone 8, iPhone 13), iOS 15.7.8 (iPad Air 2) > > ### Device > iPhone 8, iPhone 13, iPad Air 2 > > ### Build Version > 2023.8.0 (4566) > > ### Beta > * [ ] Using a pre-release version of the application. Here a temporary fix https://www.reddit.com/r/Bitwarden/comments/164eg71/comment/jznf5oj
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#1707