github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-06-19 20:25:08 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[GH-ISSUE #737] Android application not logged out after account is deleted #6961

New Issue
Closed
opened 2026-04-10 23:19:50 -05:00 by GiteaMirror · 2 comments
GiteaMirror commented 2026-04-10 23:19:50 -05:00
Owner
Copy Link

Originally created by @grmpyninja on GitHub (Feb 22, 2020).
Original GitHub issue: https://github.com/bitwarden/android/issues/737

I'm testing bitwarden on my mobile and wanted to test it on desktop. I forgot the password and had biometrics enabled on mobile. To recover password I decided to deleted the account. I followed the links and deleted account successfully, however the mobile app was not automatically logged out and i was still able to use biometrics to log in to the vault.

I would expect, in case of account delete, that all devices would be logged out immediately.

  1. would go for push notifications for mobile apps (haven't tested desktop apps yet)
  2. re-try in case of unsuccessful (somebody can turn off my stolen device or put it into airplane mode)
  3. force master password after some period of time, as e.g. from point 2, somebody can use airplane mode to disconnect from the network and then there is no way to deliver 'delete' instruction, but forcing master pass after X days would solve the issue i guess (theif needs to root the device in the meantime). Default could be off, configurable X days via settings would be awesome.
Originally created by @grmpyninja on GitHub (Feb 22, 2020). Original GitHub issue: https://github.com/bitwarden/android/issues/737 I'm testing bitwarden on my mobile and wanted to test it on desktop. I forgot the password and had biometrics enabled on mobile. To recover password I decided to deleted the account. I followed the links and deleted account successfully, however the mobile app was not automatically logged out and i was still able to use biometrics to log in to the vault. I would expect, in case of account delete, that all devices would be logged out immediately. 1. would go for push notifications for mobile apps (haven't tested desktop apps yet) 2. re-try in case of unsuccessful (somebody can turn off my stolen device or put it into airplane mode) 3. force master password after some period of time, as e.g. from point 2, somebody can use airplane mode to disconnect from the network and then there is no way to deliver 'delete' instruction, but forcing master pass after X days would solve the issue i guess (theif needs to root the device in the meantime). Default could be off, configurable X days via settings would be awesome.
GiteaMirror commented 2026-04-10 23:19:51 -05:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (Feb 23, 2020):

Right now it will log out the next time it contacts the server (likely to sync) and sees that the user account doesn't exist.

<!-- gh-comment-id:590018489 --> @kspearrin commented on GitHub (Feb 23, 2020): Right now it will log out the next time it contacts the server (likely to sync) and sees that the user account doesn't exist.
GiteaMirror commented 2026-04-10 23:19:52 -05:00
Author
Owner
Copy Link

@atjbramley commented on GitHub (Jul 27, 2023):

Hi @grmpyninja,

Thank you for your report, it seems like it is a duplicate of this one https://github.com/bitwarden/mobile/issues/653

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time in there - our engineering team will be happy to review these.

This issue will now be closed.

Thanks!

<!-- gh-comment-id:1653841171 --> @atjbramley commented on GitHub (Jul 27, 2023): Hi @grmpyninja, Thank you for your report, it seems like it is a duplicate of this one https://github.com/bitwarden/mobile/issues/653 If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time in there - our engineering team will be happy to review these. This issue will now be closed. Thanks!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#6961
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?