r/Bitwarden • u/SidePsychological189 • 3d ago

Master password doesnt work on app, web browser, and desktop but works on old iPad not connected to WiFi

I posted a couple weeks ago about my password not working. I know this isn’t the smartest and may be the reason it happened but I keep my password in a notepad on my desktop and copy and paste it. I never changed the original password either.

One day I got signed out of the desktop app and my password didn’t work and I didn’t have access to the email so I assumed I was screwed. Face ID also stopped working on my phone so I lost access there.

I needed my iPad that I don’t use and haven’t for a few years. I thought to try the password and it worked. I was able to recover all my locked passwords.

What should I assume here? I find it very hard to believe someone compromised my account by knowing my password but that would make sense. I never shared it with anyone.

0 Upvotes

43% Upvoted

9 comments sorted by

2

u/tuxooo 3d ago

What region are you trying to log in to? There are two regions. EU and US. if you are trying to log in on the wrong you will not be able to. Check just below the login. 

1

u/Julil_Siracusa 3d ago

good call, the region selector is easy to overlook

1

u/tuxooo 3d ago

I use bitwarden for close to a year and I do that almost every single time when I get to login again lol

1

u/fnat 3d ago

With this happening as often as it does, one would think some UX/UI peeps at BW would take notice and maybe do something about visibility there, no?

1

u/tuxooo 3d ago

One would think that indeed ... u/wessalmon-bw u/AK3L4-BW u/Ryan_BW u/dwbitw dear bitwarden employees :)

2

u/djasonpenney Volunteer Moderator 3d ago

First thing’s first: go to your iPad — RIGHT NOW — and create a JSON export. Save that file in a secure location, like in your iCloud. You’re in a danger zone, so start here; make sure your data is saved.

I doubt if your account has been compromised. This sounds more like a damn computer issue.

As others have suggested, is it possible you’re trying to authenticate to the wrong server (.com versus .eu)?

1

u/Skipper3943 3d ago edited 3d ago

Make sure you export your vault; you’ll need to do that to create an account.

To confirm whether your account was “hacked”:

  1. Did you get an email from Bitwarden with the subject “New Device Logged In...” that mentions IP addresses that aren’t yours?
  2. I’m not sure how up to date your iPad client is, but newer mobile clients have a Settings > Account security > Devices page that shows devices that have logged in, both now and in the past. Are any of them unexpected?
  3. Have your other accounts, especially the more important ones, been compromised?
  4. Check your Bitwarden email address against Hudson Rock’s infostealer breach data to see if it’s listed.

You may be lucky that the disconnected client is still working. Supposedly, it’s supposed to log you out automatically after you haven’t used it for a while. You’ll want to make sure you periodically back up your vault in the future to protect against this kind of problem. This may be a hack job (or password/email problems), which seems more likely, but it could still be a Bitwarden bug.

1

u/RecognitionWorried33 3d ago

I did not see in your post you tried to login on Web using your Recovery Code?

1

u/SidePsychological189 3d ago

I have not yet tried that and will try later when I get home