github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-03-19 13:36:39 -05:00
Code Issues 144 Packages Projects Releases 116 Wiki Activity

[Bug] Unlimited Pin / Fingerprint Unlock Tries #177

New Issue
Closed
opened 2025-11-07 08:30:00 -06:00 by GiteaMirror · 1 comment
GiteaMirror commented 2025-11-07 08:30:00 -06:00
Owner
Copy Link

Originally created by @edsimpsons83 on GitHub (Jan 18, 2018).

I am classifying this as a bug since Apple and Google do (e.g. Apple CVE-2014-4451 - Unlimited incorrect pin attempts on iOS). Currently, if a pin unlock or fingerprint unlock is set on the mobile app, a user or attacker is allowed unlimited attempts to try and unlock the Bitwarden vault instead of being capped at a reasonable amount e.g. 5 before reprompting for the master password.

Originally created by @edsimpsons83 on GitHub (Jan 18, 2018). I am classifying this as a bug since Apple and Google do (e.g. Apple CVE-2014-4451 - Unlimited incorrect pin attempts on iOS). Currently, if a pin unlock or fingerprint unlock is set on the mobile app, a user or attacker is allowed unlimited attempts to try and unlock the Bitwarden vault instead of being capped at a reasonable amount e.g. 5 before reprompting for the master password.
GiteaMirror commented 2025-11-07 08:30:01 -06:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (Jan 18, 2018):

Thanks. We already have this slated as a fix in next version with a limit of 10 attempts.

@kspearrin commented on GitHub (Jan 18, 2018): Thanks. We already have this slated as a fix in next version with a limit of 10 attempts.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#177
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?