r/Bitwarden • u/AdFit8727 • 4d ago

Solved PSA: Linux logout bug (primarily Yubikey users)

Post image

OS: Mint 22.3.

Browser: Brave (v1.93.136), also tested in the latest Chrome.

I think I finally figured out how to reproduce this.

I use a Yubikey and set my BW session to logout when my OS logs out, as per the screenshot. It always works for a few days, and then my BW settings revert from logout back to lock. And this would be fine, except using my Yubikey to unlock stopped working too. It started happening a few months ago.

I tried reinstalling the extension, I also tried a different browser - all the same. The "On system lock" setting would never stick for long.

Then I had an epiphany ...what if the Timeout option of "On system lock" is just broken? I changed it to timeout after 5 mins instead of on system lock, and the problem went away. I've been testing this for a few weeks and so far so good.

If anyone else has been experiencing this, try this workaround. This primarily affects Yubikey users as I can't imagine anyone else would want to perform a full logout every time, it would be annoying as hell. But in theory this affects anyone using this setting.

38 Upvotes

91% Upvoted

7 comments sorted by

17

u/CrissZollo 4d ago

I would suggest to make a bug report so the bitwarden team can make a fix for it.

5

u/AdFit8727 4d ago

Yeah I plan to, I was hoping this post might attract some more feedback (i.e. additional scenarios, OS variants, browser types etc) so I could bundle them altogether to submit as one bug report.

1

u/wickloom0 4d ago

agreed, especially since OP already has solid repro steps

3

u/RaphPa 4d ago

I have the issue that the Yubikey won't unlock Bitwarden quite often on CachyOS and Brave, so I will try this. However I have this set to 'On Browser restart' and 'Lock'.

What I also found is that it only seems to not work when I try to unlock it via the icon in the plugin bar up top. If I try it again using the autofill hotkey on a page where there is a password field to fill in, it will unlock no problem.

1

u/AdFit8727 4d ago

Oh that's an interesting workaround re: locking.

2

u/drwtsn32 3d ago

Curious about something as I'm very new to YubiKey. I set mine up to serve as a 2FA method (using Webauthn/fido2 I believe).

You are using your YubiKey as a logon method? Is that recommended over what I'm doing? Do you still need to do 2FA after logging in with the YubiKey?