github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-08-23 17:47:57 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[GH-ISSUE #2727] Email - "New Device Logged In From Android" Wrong IP address #27591

New Issue
Closed
opened 2026-04-18 11:05:00 -05:00 by GiteaMirror · 6 comments
GiteaMirror commented 2026-04-18 11:05:00 -05:00
Owner
Copy Link
Copy Source

Originally created by @unoukujou on GitHub (Aug 27, 2023).
Original GitHub issue: https://github.com/bitwarden/android/issues/2727

I logged in with a new device on EU server.

Got email:

Your Bitwarden account was just logged into from a new device.

IP Address: 20.X.X.X

This is NOT my IP.

I'm not using a proxy or VPN.

I think this is the IP of the server that is hosting bitwarden EU.

Googled it and yes, I'm not the only one.

Not good. Just saying. Bitwarden is supposed to be highly secure and these kind of issues just doesn't make me feel at ease. An alert telling me a new device logged in, and it gives me the wrong IP. What am I supposed to think? Was it me? Or not? I'm screwed? Help!

Expected Result

My IP

Actual Result

Not my IP

Operating System

Android

Originally created by @unoukujou on GitHub (Aug 27, 2023). Original GitHub issue: https://github.com/bitwarden/android/issues/2727 I logged in with a new device on EU server. Got email: ``` Your Bitwarden account was just logged into from a new device. IP Address: 20.X.X.X ``` This is NOT my IP. I'm not using a proxy or VPN. I think this is the IP of the server that is hosting bitwarden EU. Googled it and yes, I'm not the only one. Not good. Just saying. Bitwarden is supposed to be highly secure and these kind of issues just doesn't make me feel at ease. An alert telling me a new device logged in, and it gives me the wrong IP. What am I supposed to think? Was it me? Or not? I'm screwed? Help! ### Expected Result My IP ### Actual Result Not my IP ### Operating System Android
GiteaMirror added the bug label 2026-04-18 11:05:00 -05:00
GiteaMirror commented 2026-04-18 11:05:03 -05:00
Author
Owner
Copy Link
Copy Source

@unoukujou commented on GitHub (Aug 27, 2023):

To reproduce:

  1. Log in.
  2. Read the email you receive with subject: "New Device Logged In..." And see that the IP of this new login is not your IP.
<!-- gh-comment-id:1694744509 --> @unoukujou commented on GitHub (Aug 27, 2023): To reproduce: 1) Log in. 2) Read the email you receive with subject: "New Device Logged In..." And see that the IP of this new login is not your IP.
GiteaMirror commented 2026-04-18 11:05:04 -05:00
Author
Owner
Copy Link
Copy Source

@unoukujou commented on GitHub (Aug 28, 2023):

iOS same thing.

<!-- gh-comment-id:1694890591 --> @unoukujou commented on GitHub (Aug 28, 2023): iOS same thing.
GiteaMirror commented 2026-04-18 11:05:05 -05:00
Author
Owner
Copy Link
Copy Source

@unoukujou commented on GitHub (Aug 28, 2023):

A guy reported this over 4 years ago. Then the founder of Bitwarden solved the problem by adding a setting to just disable the new login alert emails. No I'm not joking. 🤦

https://github.com/bitwarden/server/issues/466

And the guy said... Thanks! 🤦‍♂️ 🤦‍♂️

<!-- gh-comment-id:1694897598 --> @unoukujou commented on GitHub (Aug 28, 2023): A guy reported this over 4 years ago. Then the founder of Bitwarden solved the problem by adding a setting to just disable the new login alert emails. No I'm not joking. 🤦 [https://github.com/bitwarden/server/issues/466](https://github.com/bitwarden/server/issues/466) And the guy said... Thanks! 🤦‍♂️ 🤦‍♂️
GiteaMirror commented 2026-04-18 11:05:06 -05:00
Author
Owner
Copy Link
Copy Source

@SergeantConfused commented on GitHub (Aug 28, 2023):

Hi @unoukujou,

Thank you for your report; I am able to reproduce this and I have flagged it to our engineering team.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

Thank you again,

<!-- gh-comment-id:1695407989 --> @SergeantConfused commented on GitHub (Aug 28, 2023): Hi @unoukujou, Thank you for your report; I am able to reproduce this and I have flagged it to our engineering team. If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these. Thank you again,
GiteaMirror commented 2026-04-18 11:05:06 -05:00
Author
Owner
Copy Link
Copy Source

@GieltjE commented on GitHub (Sep 11, 2023):

Using apache as a reverse proxy, keep getting these for "172.19.0.1"

Setting either

        RemoteIPHeader X-Forwarded-For
        RemoteIPInternalProxy 172.16.0.0/12

or

        ProxyPreserveHost On

Yields no improvement.

Also yields no results (adding the IPv6 results in the 172.x being shown again):

real_ips: ['192.168.199.0/24', '172.16.0.0/12', '::ffff/48']
<!-- gh-comment-id:1713456116 --> @GieltjE commented on GitHub (Sep 11, 2023): Using apache as a reverse proxy, keep getting these for "172.19.0.1" Setting either ``` RemoteIPHeader X-Forwarded-For RemoteIPInternalProxy 172.16.0.0/12 ``` or ``` ProxyPreserveHost On ``` Yields no improvement. Also yields no results (adding the IPv6 results in the 172.x being shown again): ``` real_ips: ['192.168.199.0/24', '172.16.0.0/12', '::ffff/48'] ```
GiteaMirror commented 2026-04-18 11:05:07 -05:00
Author
Owner
Copy Link
Copy Source

@vvolkgang commented on GitHub (Jun 20, 2024):

Issue migrated to https://github.com/bitwarden/mobile/issues/2727

<!-- gh-comment-id:2181387193 --> @vvolkgang commented on GitHub (Jun 20, 2024): Issue migrated to https://github.com/bitwarden/mobile/issues/2727
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No labels bug
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#27591