mirror of
https://github.com/bitwarden/android.git
synced 2026-05-06 07:48:22 -05:00
[GH-ISSUE #4706] Not able to access Bitwarden-hosted vault on Android Bitwarden 2025.1.1 (S23 Ultra Android 14 Security patch Jan 2025) #21425
Closed
opened 2026-04-16 21:54:37 -05:00 by GiteaMirror
·
14 comments
No Branch/Tag Specified
main
sdlc/sdk-update
new-item-types/PM-32810_bank-account-view
new-item-types/PM-32810_bank-account
beta-for-qa
BWA-253/not-displaying-totp-coded-with-empty-key
target-sdk-37
vvolkgang/renovate-remove-group
pm-34038/card-scanner-qa-fixes
PM-33982/build-device-screen
PM-30625/filter-out-empty-totp-vault-count
vvolkgang/update-jira-release-notes
new-item-types/PM-34123_new-item-menu
new-item-types/PM-32806_passport
new-item-types/PM-32808_drivers-license
BWA-99/show-next-totp
BWA-99/add-preview-next-totp-code-setting
renovate/glidecompose
chore/improve-android-ui-verification-skill
sync-min-sdk
release/2026.4-rc51
fix/security-sast-22741894-bvwj
related-origin-passkey-creation
release/2026.4-rc50
platform/android-breaking-change-detection
innovation-sprint-2026-send-folder
release/2026.3-rc49
PM-34193-vault-lockout
android-collections
llm/add-resolving-sdk-updates-skill
QA-1523/sanity-test-saucelabs
release/2026.3-rc48
PM-26577-app-links-support
PM-26896-autofill-fix
release/2026.2-rc47
pr-6572
release/2026.2-rc46
release/2026.1-rc45
PM-30644/added-logs-for-debug
PM-30644/quicktile-nav-not-showing-migration
minor-gradle-updates
release/2026.1-rc42
release/2026.1-rc44
release/2026.1-rc43
PM-28834/set-landscape-on-horizonos-devices
PM-28468/validate-and-navigate-to-vault-migration
PM-20026/force-ltr-passwords-and-codes
release/2025.12-rc41
cmcg/testCoverage
PM-29014/talkback-support-for-passwords
release/2025.12-rc40
BRE-1305/publish_test
accept-user-certs
autofill-permissions
release/2025.11-rc39
PM-22479/check-all-certificates-validate-asset-links
release/2025.10-rc38
agalles/android-latest
retro-agent
PM-27001/skip-account-selection-only-one-exists-cxp
release/2025.10-rc37
agalles/test-1118
release/2025.10-rc36
PM-20593-token-refresh
QA-1126b/adding-native-sanity-test
release/2025.9-rc35
pm-25933/sdk-update-password
release/2025.9-rc34
release/2025.8-rc33
agalles/20250821-release
debug-release-issues
pm-24249-allow-automated-prs-for-sdk-updates
release/2025.8-rc32
release/WORKFLOW-TEST-2025.8-rc28
agalles/20250807release
release/2025.07-rc25
release/hotfix-v2025.7.0-bwa
pm-23311/export-vault-policy-bypass
release/2025.07-rc24
authenticator-pm-sync-flags-issue
release/hotfix-v2025.6.0-bwpm
release/2025.06-rc21
agalles/automate-android-fastlane-patch
release/2025.05-rc20
release/2025.04-rc19
languages/basque
release/2025.03-rc19
update-readme
qrcode/feature
innovation/archive/pm-19153-archive-items
qrcode/2-ui-fields
qrcode/1-page
hold-on-biometric-prompt-alternative
release-notes-process
release/2025.02-rc16
bwa-monorepo
PM-8223/new-device-verification-ux-improvements
pm-18451/exempt-from-policies
test-bwa
release/2025.01-rc15
release/2025.01-rc14
release/2024.12-rc13
pm-16670/sync-leave-notice
821
PM-16695/backport-lean-more-new-device-verification
release/hotfix-v2024.11.7
release/2024.11-rc1
pm-11304/collection-add-item-button
PM-14241/disabling-logs-app-crash
poc/offline-editing
new-version-calc
pm-11649/expired-link-services
pm-6702/add-feature-flag
pm-6702/email-verification-feature
pm-9933/marketing-copy-update
pm-6702/registration-flows
update-templates
pm-6701/email-verification-selfhost-registration
v2026.4.0-bwa
v2026.4.0-bwpm
v2026.3.1-bwa
v2026.3.1-bwpm
v2026.3.0-bwpm
v2026.3.0-bwa
v2026.2.1-bwpm
v2026.2.1-bwa
v2026.2.0-bwpm
v2026.2.0-bwa
v2026.1.1-bwa
v2026.1.1-bwpm
temp-test
v2026.1.0-bwpm
v2026.1.0-bwa
v2025.12.1-bwa
v2025.12.1-bwpm
v2025.12.0-bwa
v2025.12.0-bwpm
v2025.11.1-bwpm
v2025.11.1-bwa
v2025.11.0-bwpm
v2025.11.0-bwa
v2025.10.1-bwa
v2025.10.1-bwpm
v2025.10.0-bwa
v2025.10.0-bwpm
v2025.9.1-bwa
v2025.9.1-bwpm
v2025.9.0-bwa
v2025.9.0-bwpm
v2025.8.1-bwa
v2025.8.1-bwpm
v2025.8.0-bwa
v2025.8.0-bwpm
v2025.7.2-bwa
v2025.7.2-bwpm
v2025.7.1-bwa
v2025.7.1-bwpm
v2025.7.0-bwa
v2025.7.0-bwpm
v2025.6.1-bwpm
v2025.6.0-bwa
v2025.6.0-bwpm
v2025.1.0-bwa
v2025.5.0-bwa
v2025.5.0-bwpm
v2025.5.999
2025.4.0
v2025.4.0
untagged-4731eaadac73f3dfbbb8
v2025.3.0
v2025.2.0
untagged-815a165c5d70ffe75bc7
v2025.1.2
v2025.1.1
v2025.1.0
v2024.12.0
untagged-5a76b6392a4c8998c63a
v2024.11.7
v2024.11.6
v2024.11.5
v2024.11.4
v2024.11.3
v2024.11.2
v2024.11.1
v2024.11.0
v2024.10.2
v2024.10.1
v2024.10.0
v2024.9.0
v2024.8.1
v2024.8.0
v2024.7.3
v2024.7.2
v2024.7.1
v2024.7.0
v2024.6.1
v2024.6.0
v2024.5.1
v2024.4.1
v2024.4.2
v2024.4.0
v2024.3.3
v2024.3.1
v2024.3.0
v2024.2.1
v2024.2.0
v2024.1.1
v2024.1.0
v2023.12.0
v2023.10.0
v2023.9.2
maui-single-project-android
v2023.9.1
v2023.9.0
v2023.8.0
v2023.7.0
v2023.5.0
v2023.4.0
v2023.3.2
v2023.3.1
v2023.3.0
v2023.2.0
v2023.1.0
v2022.11.0
v2022.10.0
v2022.9.1
v2022.9.0
v2022.8.0
v2022.6.2
v2022.6.1
v2022.6.0
v2022.05.0
v2.18.0
v2.17.0
v2.16.4
v2.16.3
v2.16.2
v2.16.1
v2.15.0
v2.14.2
v2.14.1
v2.14.0
v2.13.0
v2.12.0
v2.11.3
v2.11.2
v2.11.1
v2.11.0
v2.10.0
v2.9.1
v2.9.0
v2.8.2
v2.8.1
v2.8.0
v2.7.2
v2.7.0
v2.6.1
v2.6.0
v2.5.6
v.2.5.5
v2.5.5
v2.5.4
v2.5.3
v2.5.2
v2.5.1
v2.5.0
v2.4.3
v2.4.2
v2.4.1
v2.4.0
v2.3.1
v2.3.0
v2.2.8
v2.2.7
v2.2.6
v2.2.2
v2.2.1
v2.2.0
v2.1.2
v2.1.0
v2.0.6
v2.0.5
v2.0.4
v2.0.3
v2.0.2
v2.0.1
v2.0.0
v1.22.1
v1.22.0
v1.21.0
v1.20.0
v1.19.0
v1.18.1
v1.18.0
v1.17.0
v1.16.0
v1.15.2
v1.15.1
v1.15.0
v1.14.4
v1.14.1
v1.14.0
v1.13.0
v1.12.2
v1.12.1
v1.12.0
v1.11.1
v1.11.0
v1.10.0
v1.9.0
v1.8.1
v1.8.0
v1.7.0
v1.6.5
v1.6.1
v1.6.0
v1.5.1
v1.5.0
v1.4.4
v1.4.3
v1.4.0
v1.3.0
v1.2.1
v1.2.0
v1.1.0
v1.0.0
v0.0.6
v0.0.5
v0.0.4
v0.0.3
v0.0.2
v0.0.1
Milestone
No items
No Milestone
Projects
Clear projects
No project
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/android#21425
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @vrosu on GitHub (Feb 8, 2025).
Original GitHub issue: https://github.com/bitwarden/android/issues/4706
Steps To Reproduce
Issue started after updating to 2025.1.0, reported to Customer Support as request 585921 on Jan 17 2025.
2. Open Bitwarden Android client
3. Login by providing user, password and the associated MFA (either Authenticator code or Yubikey)
4. Error message appears: "We were unable to process your request. Please try again or contact us"
Expected Result
Be able to view my vault content in Bitwarden Android client
Actual Result
I am not able to view my vault content in Bitwarden Android client (started on 2025.1.0, the same on 2025.1.1)
Screenshots or Videos
Additional Context
The following unsuccessful attempts to solve were done via the Customer Support interaction:
Accessing the web version (vault.bitwarden.com) via browser from the same home network works.
Accessing the vault via the Bitwarden IoS 2025.1.2 client from the same home network works.
Build Version
2025.1.1
What server are you connecting to?
US
Self-host Server Version
No response
Environment Details
-Samsung S23 Ultra
-Android 14, Security patch level: Jan 1 2025
Issue Tracking Info
@bitwarden-bot commented on GitHub (Feb 8, 2025):
Thank you for your report! We've added this to our internal board for review.
ID: PM-18140
@vrosu commented on GitHub (Feb 8, 2025):
On Feb 5th 2025 I've been told via CS that "Version 2025.1.2 should be available for Android clients as well". Obviously incorrect, since we're still on version 2025.1.1 at the time of writing this post. When is that expected to be released? (seeing this as a last resort attempt)
@yodasad commented on GitHub (Feb 12, 2025):
Version 2025.1.2 (19740) the problem remains unsolved :(
@vrosu commented on GitHub (Feb 12, 2025):
Hi @yodasad . Are you experiencing the same issue like me? You're using vault hosted by BW, right?
@SaintPatrck commented on GitHub (Feb 12, 2025):
Hi all,
Would anyone be willing to check for logs in a dev build? If there is an error connecting to our servers or decrypting vault data you should see logs emitted in logcat.
@vrosu commented on GitHub (Feb 12, 2025):
@SaintPatrck Absolutely. What are the steps to do this? I can install a separate apk (is the dev build mentioned above the dev build from the existing releases?), but I just need to have the proper steps.
@SaintPatrck commented on GitHub (Feb 13, 2025):
@vrosu
Thank you for assisting. Before we go through capturing logs, can you check if the change from #4721 resolves your issue?
A build with the change can be downloaded from this job run: https://github.com/bitwarden/android/actions/runs/13315247004
You'll want to download either com.x8bit.biwarden.dev.apk (dev build) or com.x8bit.bitwarden.beta.apk (beta build) so that you don't overwrite your production installation.
I suggest downloading directly onto your device to makes things easier. Once complete, navigate to the downloaded APK and tap it to start installation. If this is the first time you've installed an application outside of Play Store, you may be prompted to allow installations from other sources. Follow the system prompts to grant permission and complete installation.
If your vault loads after logging in, it will confirm you're running into an issue similar to the one @cseufert is experiencing and submitted a fix for (#4721).
If the change from #4721 does not fix your issue we can look into capturing logs, which is a little more involved. A quick search led me to a Citrix article that does a great job explaining how to connect your device and capture logs using ADB.
@cseufert commented on GitHub (Feb 13, 2025):
Hi
Yes, #4721 is my PR, and this fixed my issue (vault wont load), tested in
android studio before submitting the PR.
My device is running under google Advanced Protection Program which makes
it super hard to sideload apps on the device.
On Fri, 14 Feb 2025 at 07:06, Patrick Honkonen @.***>
wrote:
--
Chris Seufert
M. 0424 066 016 T. 03 9510 7477
The Well - 1 / 21 Wellington St, St Kilda, Victoria 3182, Australia
modd.com.au http://modd.com.au/ - udo.net.au
http://udo.net.au/ - artsphere.com.au http://artsphere.com.au/
@vrosu commented on GitHub (Feb 15, 2025):
@SaintPatrck Thanks a lot for the time taken to help and @cseufert for that PR. In short:
What I observed was the following error:
02-15 13:37:45.784 20883 23221 D BitwardenNetworkClient: <-- END HTTP (1773879-byte body)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: Network Error: https://api.bitwarden.com/sync
02-15 13:37:45.836 20883 23221 W NetworkResultCall: java.lang.IllegalArgumentException: Unknown value 1
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.platform.datasource.network.serializer.BaseEnumeratedIntSerializer.deserialize(BaseEnumeratedIntSerializer.kt:32)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.platform.datasource.network.serializer.BaseEnumeratedIntSerializer.deserialize(BaseEnumeratedIntSerializer.kt:16)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.internal.StreamingJsonDecoder.decodeSerializableValue(StreamingJsonDecoder.kt:69)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeSerializableValue(AbstractDecoder.kt:43)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeSerializableElement(AbstractDecoder.kt:70)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.internal.StreamingJsonDecoder.decodeSerializableElement(StreamingJsonDecoder.kt:168)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.vault.datasource.network.model.SyncResponseJson$Cipher$SecureNote$$serializer.deserialize(SyncResponseJson.kt:774)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.vault.datasource.network.model.SyncResponseJson$Cipher$SecureNote$$serializer.deserialize(SyncResponseJson.kt:774)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.internal.StreamingJsonDecoder.decodeSerializableValue(StreamingJsonDecoder.kt:69)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeSerializableValue(AbstractDecoder.kt:43)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeNullableSerializableElement(AbstractDecoder.kt:78)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.vault.datasource.network.model.SyncResponseJson$Cipher$$serializer.deserialize(SyncResponseJson.kt:435)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.vault.datasource.network.model.SyncResponseJson$Cipher$$serializer.deserialize(SyncResponseJson.kt:435)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.internal.StreamingJsonDecoder.decodeSerializableValue(StreamingJsonDecoder.kt:69)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeSerializableValue(AbstractDecoder.kt:43)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeSerializableElement(AbstractDecoder.kt:70)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.internal.StreamingJsonDecoder.decodeSerializableElement(StreamingJsonDecoder.kt:168)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.CompositeDecoder.decodeSerializableElement$default(Decoding.kt:539)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.internal.CollectionLikeSerializer.readElement(CollectionSerializers.kt:80)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.internal.AbstractCollectionSerializer.readElement$default(CollectionSerializers.kt:51)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.internal.AbstractCollectionSerializer.merge(CollectionSerializers.kt:36)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.internal.AbstractCollectionSerializer.deserialize(CollectionSerializers.kt:43)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.internal.StreamingJsonDecoder.decodeSerializableValue(StreamingJsonDecoder.kt:69)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeSerializableValue(AbstractDecoder.kt:43)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.encoding.AbstractDecoder.decodeNullableSerializableElement(AbstractDecoder.kt:78)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.vault.datasource.network.model.SyncResponseJson$$serializer.deserialize(SyncResponseJson.kt:26)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at com.x8bit.bitwarden.data.vault.datasource.network.model.SyncResponseJson$$serializer.deserialize(SyncResponseJson.kt:26)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.internal.StreamingJsonDecoder.decodeSerializableValue(StreamingJsonDecoder.kt:69)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at kotlinx.serialization.json.Json.decodeFromString(Json.kt:149)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at retrofit2.converter.kotlinx.serialization.Serializer$FromString.fromResponseBody(Serializer.kt:26)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at retrofit2.converter.kotlinx.serialization.DeserializationStrategyConverter.convert(DeserializationStrategyConverter.kt:11)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at retrofit2.converter.kotlinx.serialization.DeserializationStrategyConverter.convert(DeserializationStrategyConverter.kt:7)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at retrofit2.OkHttpCall.parseResponse(OkHttpCall.java:246)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at retrofit2.OkHttpCall$1.onResponse(OkHttpCall.java:156)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at okhttp3.internal.connection.RealCall$AsyncCall.run(RealCall.kt:519)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:644)
02-15 13:37:45.836 20883 23221 W NetworkResultCall: at java.lang.Thread.run(Thread.java:1012)
02-15 13:37:45.837 20883 20942 I t.bitwarden.dev: Explicit concurrent mark compact GC freed 4330(292KB) AllocSpace objects, 1(1736KB) LOS objects, 49% free, 10MB/20MB, paused 235us,1.709ms total 24.275ms
If needed, I can paste the relevant logcat file in its entirety, just that I'll need to obfuscate my profile data that's being output in the lines above.
A few observations:
@vrosu commented on GitHub (Feb 17, 2025):
I tried today to ask ChatGPT what could cause this:
To take a wild guess, it seems that there's a network error that stops the whole vault content to be received by my Android (not sure whether the Server stops the connection or the Client stops it).
@SaintPatrck commented on GitHub (Feb 18, 2025):
@vrosu thank you for providing those logs. We've identified the issue and are working on a fix.
@vrosu commented on GitHub (Feb 22, 2025):
@SaintPatrck thanks. When would you estimate a build I can test would exist?
@SaintPatrck commented on GitHub (Feb 27, 2025):
@vrosu Unfortunately we will not be able to resolve this with code changes to the Android client. Please reach out to our CS team and reference this ticket. They will work with you to clean up the erroneous data in your vault. If asked, let them know that your vault contains invalid "SecureNoteType" identifiers.
@vrosu commented on GitHub (Feb 28, 2025):
I do not understand why this issue can't be solved via code, considering the Windows app is capable of opening the vault. By closing this it means that there will be different (rather drastic) behavior between Windows and Android apps.
I canceled my subscription and moved to Proton Pass but I must say thanks for the responsive community in diagnosing this.