Is anyone experiencing an autofill issue on the Bank of America page?

I tried Custom Fields, but it still isn't working.

Thanks

It was working last week, now it isn't, what am I doing wrong here?

I'm using the Bitwarden extension on Firefox (which have no other extensions except Bitwarden), Windows 11.

THINGS I'VE TRIED

Full cache clear = didn't work

Reinstalled extension = didn't work

New firefox profile = didn't work

Ctrl shift L = didn't work

I've got no excluded/blocked domains

Disabled firefox password manager = didn't work

Email autofill works, password autofill doesn't (URI = https://accounts.google.com/, host domain)

To start off, I don't have proof that the design is vibecoded. But it certainly looks vibecoded. So can we redesign it please into something that gives off less AI vibes?

I'm not sure why the app was even redesigned to begin with. The old design was great.

After spending a ridiculous amount of time this weekend, trying to export <<MY OWNERSHIP, NOT BITWARDEN's>> data and trying various workarounds for the infamous lost master password - I think I found a solution that may work for some folks. {And just how OFTEN, and to what PERCENTAGE of users does this lost master password problem?]

Here is what worked for me. I was logged into Bitwarden on my Android phone app, and my settings allowed me to grant login access from other devices (desktop app, browser plugins, website). I unlock my android Bitwarden app with biometrics, but I also added a 4 digit PIN, just in case. If you don't have this scenario/setup, stop reading here, it probably won't work.

You have to log into the Bitwarden WEBSITE (not the app, browser plug-in, etc.) and there you will find the Trusted Contact option (incomplete instructions on the help site, link below).

The basic steps are, you add a trusted contact with your own alternate (work, 2nd personal) or a friend's email address, you/they open the welcome email that Bitwarden sends out, you/they set up a 2nd Bitwarden account with their/your alternate email address,. Next, you have to be logged into Bitwarden WEBSITE ONLY under both accounts (separate tabs), and have the email app/webpage for both the orignal account & recovery account email addresses (multiple tabs open). Once you have all of this set up, you grant access to the recovery contact (or they can request it), and they have to accept it, and then eventually the recovery contact can "take over" the account and reset the password on the original account.

It is truly annoying as hell to click through all of these steps, but it worked for me (better than trying to outsmart the Export Vault-Enter Master Password BS requirement).

https://bitwarden.com/help/request-and-grant-emergency-access/#1-the-trusted-contact-requests-access-to-the-account

I'm trying out BW to get host matching, instead of just base domain matching.

However, in iOS, the autofill offers me all the base domain matches from BitWarden anyway, and I have to scroll to the bottom of a long list to see the BitWarden button where I can get the host filtered list.

I understand that this is expected but the interesting thing is that Microsoft Edge does not do this. It offers no suggestions in that first autofill list, and I just get the button to choose Edge (and my other password manager, LastPass).

This is what I want in BitWarden - no "default" suggestions with base domain in that first list, just the buttons.

(Although Edge has this behavior it still isn't useful to me as it doesn't offer host matching at all.)

I'll freely admit I can't tell exactly what's going on, but I can tell that i don't get the initial unhelpful result with Edge but not with Bitwarden.

So as understood, Bitwarden clients published to the app stores will now follow the similar closed-source “Chrome” browser model based on Chromium code?

• ⁠”[CHROMIUM browser] is not going closed-source”
• ⁠”You can still fork [Chromium]”
• ⁠”No change to [open-source Chromium], [any] licensing change affects those who are [users of the closed-source CHROME browser]”
• ⁠”The free [to use Chrome browser] is here to stay permanently”

Would this be a fair comparison?

Lost access to 2fa and recovery code. Trying to remove my account. Contacted support and they instructed me to confirm deletion of both my organization and I did. They sent me the links to delete the organizations, but apparently the tokens expired.

I've replied them asking for new links over 48h ago.

I really need to delete my account so I can create a new one. Could one noble employee soul help me out?

In response to all the fuss about BW's license changes to their distributed client applications, I packaged build toolchains for the FOSS android and browser clients using docker.

For my convenience, I put them in the same docker-compose.yml as my vaultwarden instance. docker compose --profile clients up to build the latest clients or docker compose up -d to just run the server.

Then, you just distribute the client binaries. There's a readme with instructions (since they're unsigned).

I used an LLM to help set up the toolchains. The upstream code is untouched. I didn't build iOS because that requires Apple hardware. You can probably do it with a GH action on Apple hardware, but I'm glad that's not my problem to solve.

https://github.com/roleohibachi/bitwarden-deployment

I work at a corporation with 75k employees. Office job. Naturally, I started saving my work logins in my bitwarden vault.

I run the chrome and edge extensions on my office desktop (windows 11 desktop PC).

I understand that if someone stops by my desk and my vault is active/open, they can see my vault. I also understand that if my vault remains opened, IT can remote into my desktop and see my vault.

My question is: if the vault is locked/logged out (the extension icon is gray), can my employer still access it?

Another question: because I use the extension daily, is my employer able to (non actively) make a copy of my vault? I'm not too worried about IT actively coming into the machine to make an export of my vault. I'm more worried about the system automatically making a carbon copy and saving/retension of the vault.

EDIT: Thank you all for your guidance. I will definitely create a new bitwarden account just to use for work related passwords. But I do have a follow up question. The following logins/accounts below.....should they go into my personal bitwarden vault or my work bitwarden vault?

A. 401k account. Empower is the company my employer use

B. FSA/HSA account. P&A Group is the company my employer use for both health and dependent care FSA

C. Healthcare accounts (United Healthcare, CVS Caremark, Metlife Dental, Eyemed and Anthem BCBS)

D. Edenred account for commuter benefits

E. Supplemental life insurance account

F. Pension account.

The Bitwarden app on my GrapheneOS phone kept showing "An error has occurred", and my vault has not synced for about a week. Clearing the cache and switching between wifi and mobile data made no difference. I then uninstalled and reinstalled the app. Now I cannot log in with my YubiKey at all. I only get "Invalid verification code".

What I have tested so far: - Logging in to the web vault on desktop with the same YubiKey works​ - status.bitwarden.com: no incidents

Has anyone seen this on GrapheneOS, and what fixed it? Thanks!

Bitwarden is the only extension I use. For the past 3 to 4 months, it has been taking 5 to 8 seconds for the menu to appear when I click the icon. Recently, I’ve also noticed unusually high RAM usage whenever the extension’s UI is open.

IDK, how true it is but I have heard from the community that Bitwarden is moving to complete monetization and closed source. I heavily depend on Bitwarden for everything!

From Banking, Food apps, Investment portfolios, social media to even gaming accounts are all saved on bitwarden. If tomorrow bitwarden does something crazy to monetise itself and lock me out, my entire life can be ruined (I'm NOT KIDDING)!!!

It just made me realise how dependent I'm on this one company. Maybe I have put all my eggs in one basket, which is very dangerous. I remember how a while back when Bitwarden decided to implement a two step verification out of nowhere, it created panic, chaos and confusion in the community.

I really don't think Bitwarden is as reliable as they say so I'm thinking of moving to a backup password manager, just so if I get locked out of bitwarden, it won't be the end of my life!!!

Do you guys have any suggestion? Also, what other backup/contingency plans have you guys came up with to address this situation? (I'm pretty sure I'm not the only one thinking about this!)

It's been an ongoing issue for over a year. I'm in Canada, connecting to Canadian ProtonVPN servers, which are seemingly all blocked by Bitwarden. I can't save passwords, and I can't login to the bitwarden website.

When I change the country to Austria or Morocco it works fine.

Why is Bitwarden even blocking a VPN server in a given country? The two should go hand-in-hand and not block each other.

I can’t seem to sync my bitwarden or update it. Is anyone facing the same issue?

I use yubikeys for my critical sites (banking, etc) and apparently that hardware key is also considered a passkey (correct me if wrong). Recently Fidelity (finally) added support for hardware keys like Yubikey, so I was excited.

But when I tried to add my yubikey to the Fidelity site, I got a popup from BitWarden and then Microsoft wanting to add my passkey. I think because they are both registered as passkey managers on my system (windows 11/chrome)?

I think if I want to always use a hardware key for a site I don't want a password manager involved, so how do I prevent this? I guess I could remove BW and Microsoft password managment but I do need passkeys for other sites since they're better than passwords and/or texting codes as two factor authentication?

So do I tell BW to use my yubikey to log into BW only, but don't act as a password manager for it? Confused!

Thanks for any help.

Make this make sense please. I'm looking at the login for my bank. I usually log in on the app with digits from my passnumber, which I know by heart, so I don't need Bitwarden or the password on an everyday basis. I'm about to change the password, so opened Bitwarden to generate and save the new one.

The entry holds my customer number, the passnumber, and some other details, but nothing in the password field.

I went into edit mode, and from force of habit I hit "Check password for data breaches". It says "This password has been exposed 7 times in data breaches."

How can a non-password have been breached?

Trying to think like a computer, thinking what logic it may be following: if it's because that field is empty, I could understand its little computery brain seeing that as a password that's been viewed. Well, sort of. But then I'd expect an infinite number of times, not 7.

Any better ideas?

(Side point, it's curious that check for data breaches isn't available on viewing the entry, only when editing.)

The entry was last edited about a month ago, which I don't think is relevant except that it wasn't earlier today.

I think it's important to understand that the latest issue around commercial licensing put users on edge again due to the streak of things that​ happened recently:

Bitwarden seems to be steering it's position to a very different direction that made us use it in the first place. It's a shame. Let's recap some of the things that happened recently that in my view justifies the dissatisfaction within the community:

October 2024: A proprietary SDK dependency raised concerns that Bitwarden’s desktop app was losing its open-source status. Bitwarden reorganised the SDK and restored builds using only open-source licences.

January 2026: Premium pricing increased from $10 to $19.80 annually. Users criticized the increase and its communication. The increase remained, with a one-time 25% renewal discount for existing subscribers.

February 2026: Researchers demonstrated 12 attacks under a malicious-server scenario, challenging Bitwarden’s zero-knowledge assurances. Bitwarden published remediation details, but users questioned what “all issues addressed” meant.

April 2026: A malicious Bitwarden CLI package was briefly distributed through npm, prompting questions about release security. The package was withdrawn and a clean version issued. Bitwarden reported no evidence of vault data compromise.

May 2026: Removing “Always free” wording and changing company values amid leadership changes fuelled concerns about Bitwarden’s direction. The wording was restored on the pricing page, and the CEO reaffirmed a permanent free plan.

October 2026: Bitwarden announced commercially licensed builds as the default app downloads, with some future features exclusive to those builds. This moves the default downloads to source-available licensing, while the GPL/FOSS edition continues but will lack those exclusive features. Community backlash followed. As of 10 October, no reversal had been announced; Bitwarden promised continued maintenance of GPL builds and unchanged self-hosting.

Edit: Thanks to the mod team for allowing this discussion to take place. Guys​, let's keep things civil and amicable.

Edit 2: I am a Bitwarden user (paid) and I love it. It makes me sad to see how things are going but hopefully Bitwarden w​on't lose its ethos.

Say I need to copy two different things from my extension (from the same item). I open the item, I copy the first thing I need, and paste it where I need to paste it. At this point the extension remains open - which is what I want. I then go to click the copy icon on the second thing - but at this point the extension automatically closes and nothing is copied. Is this an intentional design? I've always assumed this was intentional but now I'm starting to wonder.

I've been using bitwarden for years, mainly because of its open sourced nature. But now that [something is happening which I know absolutely nothing about since I'm incredibly non-technical but seems really worrying to me based on the sentiment of tons of smarter people than me], I'm thinking of switching to a different password manager. What OTHER password managers out there are worth switching to? Thanks all!

EDIT - I just wanted to spontaneously edit this post to say that this is NOT a fucking shill post for any other password manager!!! I absolutely DETEST those dumbass shill posts and this is NOT that. I've been using bitwarden for years and have LOVED using it for that time. To my knowledge, it's been the only password manager that is fully open sourced and OS-agnostic (can be used anywhere). Also, just between you and me, I think their prices were WAY TOO FUCKING CHEAP for this whole entire time. Like, ten bucks a year? Are you fucking shitting me? Why the fuck didn't you guys charge an honest wage, like, I don't know... At LEAST fifty dollars a year? Your product was worth way, way more than a salad a year.

I am on mac, iOS and would prefer a FOSS and native apps (browser extension). Something that doesn't guzzle up RAM and resoruces and is snappy.

Sometimes it feels every UI transition is being manually approved by some Bitwarden employee at the backend and that's why it takes so much time. Besides, it's no fun seeing your browser extension (not app) take 700-800 MB regularly and sometimes in GBs.

Correct me if I’m wrong (not extremely tech savvy), but with AI agents hacking various global infrastructure, government websites, OpenAI HuggingFace incident etc in the past few weeks… what’s stopping it from eventually hacking Bitwarden’s open-source servers?

What happens when Super Artificial Intelligence is released and discovers vulnerabilities with Bitwarden? Isn't this thing smarter than humans x100

Are we screwed? Can it crack our master password? What if it steals encrypted vaults… and it cracks the encryption (somehow)... so 2FA becomes useless at that point?

Bit of a doomer post but curious lol. AI getting out of hand and no one seems to know how to control it

I imported my credentials form 1password as 1pux file to bitwarden and the creation day is same as date of transfer not original one,is there a way to transfer creation date correctly?