bitwarden/mobile

The mobile app vault (iOS and Android).

---

Bitwarden Client Applications

This repository houses all Bitwarden client applications except the Mobile application.

Please refer to the Clients section of the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great information to get you started.

Related projects:

• bitwarden/server: The core infrastructure backend (API, database, Docker, etc).
• bitwarden/mobile: The mobile app vault (iOS and Android).
• bitwarden/directory-connector: A tool for syncing a directory (AD, LDAP, Azure, G Suite, Okta) to an organization.

We're Hiring!

Interested in contributing in a big way? Consider joining our team! We're hiring for many positions. Please take a look at our Careers page to see what opportunities are currently open as well as what it's like to work at Bitwarden.

Contribute

Code contributions are welcome! Please commit any pull requests against the main branch. Learn more about how to contribute by reading the Contributing Guidelines. Check out the Contributing Documentation for how to get started with your first contribution.

Security audits and feedback are welcome. Please open an issue or email us privately if the report is sensitive in nature. You can read our security policy in the SECURITY.md file.

mobile's Issues

can't launch app because missing "libmonodroid.so"

On my Xiaomi mipad2 I can't open the app. On the error log it says it can't find libmonodroid.so.

java.lang.UnsatisfiedLinkError: dalvik.system.PathClassLoader[DexPathList[[zip file "/data/app/com.x8bit.bitwarden-2/base.apk"],nativeLibraryDirectories=[/data/app/com.x8bit.bitwarden-2/lib/x86_64, /vendor/lib64, /system/lib64]]] couldn't find "libmonodroid.so" at java.lang.Runtime.loadLibrary(Runtime.java:435) at java.lang.System.loadLibrary(System.java:988) at mono.MonoPackageManager.LoadApplication(MonoPackageManager.java:34) at mono.MonoRuntimeProvider.attachInfo(MonoRuntimeProvider.java:22) at android.app.ActivityThread.installProvider(ActivityThread.java:5018) at android.app.ActivityThread.installContentProviders(ActivityThread.java:4613) at android.app.ActivityThread.handleBindApplication(ActivityThread.java:4553) at android.app.ActivityThread.access$1500(ActivityThread.java:154) at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1369) at android.os.Handler.dispatchMessage(Handler.java:102) at android.os.Looper.loop(Looper.java:135) at android.app.ActivityThread.main(ActivityThread.java:5275) at java.lang.reflect.Method.invoke(Native Method) at java.lang.reflect.Method.invoke(Method.java:372) at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:912) at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:707)

Accessibility service is disabled after a force close

Hi,
On my OnePlus 3T running Android 7.1.2 the service is disabled after force closing bitwarden by holding the back button.
I have to manually return to the Accessibility menu to enable it again.

bitwarden v1.4.4

High battery consumption caused by Autofill Service

Need some tweaks to reduce battery consumption.

i18n

• Finish implementing proper AppResource strings throughout the app.
• Find contributors to translate app into various languages.

One Time Temporary Share to Web Vault

Interesting feature request from a reddit user:

https://docs.google.com/presentation/d/1TenR3iM08HUYgFkusk6csIG4603Db2DewploXPPw_yo/edit?usp=sharing

Bug when highlighting a secure note

Hi,
I can't take screenshots within bitwarden so here is a screenshot from another app.
When highlighting the text of a secure note I don't have the cursors:

I have to press the text to bring them out.

Passphrase Generation

Password creation is all well and good, however, there are many of us who wholly believe that passphrases are cryptographically stronger than a "randomly" generated password. Are there any plans for passphrase to be implemented? If not, I'd like to ask that it be thrown into the roadmap.

A simple comparison shows the passphrase strength vs a traditional password.

Type	Test	Entropy
Password	oI8&Yd8H4A	46.264
Passphrase	murals coddle baiting	59.277

Despite being far easier to remember, the passphrase has a higher base entropy than a default password generated by bitwarden.

Lock Screen can be bypassed on iOS

It is possible to bypass entering the master password by closing the app (home button double-click / app switching) and then restarting it. This is only possible with Auto-Lock set to anything but „intermediate“ and not when the app was locked manually.

Bitwarden Version 1.0.0 (7), iOS 10.3.1

Generate password and add webiste

Is it possible to have an option when registering to a new website and therefore generating a password to add website to the vault with login/password?

TouchId for iOS

It'd be great to have touch Id on iOS in the future (and I think some Android devices also come with this feature).

That way we don't have to input the master PW all the time :)

Broken password length validation

I tried creating a bitwarden account using the Android application, and after entrying a 27 character password it told me that "my password must be at least 8 characters".

Multilanguage

Is there a consideration of translating this app to more languages?

Search for sites

It appears that the ability to search for a site / account does not exist in the mobile client. keepassdroid supports this.

Android Accessibility Service

Create accessibility service to detect login fields and auto-fill username/passwords.

Subdomain Only Option for Sites

Fully Implement Change Password Flow for Extension

Currently the extension will just auto-fill the current password for the user during the change password flow. Add proper support for changing the password on the selected site. The extension should then auto-fill the old and the new password.

Doesn't match URI without http prefix

If I have a site saved with only the machine name in the URI field then the Android app does not match it when filling web browser forms.

E.g.
URI "cineworld.co.uk" does not match
URI "https://cineworld.co.uk" is OK

This does not appear to affect the browser plugin, and in-app vault search finds it OK.

Ignore auto fill option for specific apps

By making ignore auto fill option we can add apps to the list that we don't what to show auto fill. Otherwise auto fill will appear on every apps including apps that we don't need auto fill assist.
By this idea we can save more battery and Ram.

Disable Google Analytics Setting

We use google analytics to to better learn how the app is being used by users so that improvements can be made. Some users to not want to be tracked in this way. Add an option in settings to allow a user to opt-out of of google analytics.

Notifications for username & password

The keepassdroid client spawns a notification for the username and a notification for the password when viewing an account / site entry. This allows the user to copy the username and password individually from the notification bar without having to switch app contexts. The notifications disappear after a few seconds or immediately if the database is locked or the app is suspended / closed.

Allow search on autofill

When autofill fails to find a match (or if it finds the wrong match) then the only thing to do is tap X, find the right entry, and fill the form manually via the clipboard.

Please add an autofill search box so that I can fill arbitrary entries into apps and websites.

For apps, it would be helpful if there were a way to record the association for future.
For websites, a big red anti-phishing warning might be appropriate, but please make it possible.

[Feature request] Pressing a secure note adds the text to the clipboard

Hi,
I sometimes use the Note filed to add custom URLs (e.g the URL to sync my contacts/calendars from Nextcloud).
For now I have to edit the website to be able to copy the text of the note. It would be easier to automatically add the text to the clipboard when pressing the field.
Thank you.

Auto-fill doesn't work for sites added to home screen through Chrome

When launching a full screen site, which has been added to the home screen, bitwarden doesn't recognise the site. Clicking the auto-fill notification launches bitwarden showing "Logins for android.chrome". Proceeding to add a login pre-poppulates:

Name: android.chrome
URI: androidapp://com.android.chrome

eBay app on iOS autofill issues

See https://twitter.com/CryptoSquirreL/status/852231459146522625

Stuck at "Verify PIN"

Hi,

At the "Verify PIN" screen we are forced to enter the PIN code to open bitwarden.
Could you allow the Back button to simply close the app? At the moment, the Back button doesn't do anything.

Thanks.

[Suggestion] Unlock with master password as well as fingerprint

Add the option to unlock with master password in case of unlocking with fingerprint fails.

Option to enter API URI

An option to change the API URI to something custom besides https://api.bitwarden.com/ on the login screen.

Any small settings button to change these parameters before logging in would work.

Distinguish the difference between numerical and alphabetical characters

Would it be possible to colourise or somehow distinguish the difference between letters and numbers when showing the password? The monospace font works very well 99% of the time but it is incredibly hard to tell the difference between a zero and the capital letter O.

I don't consider this a bug, rather a very mild peeve.

Android app startup performance slow

Android startup performance is much slower than lastpass, which I thought was slow in itself.

A cold start is much slower than a cold start of lastpass, and a hot start of lastpass is about 2 seconds.

A hot start of bitwarden is 3-6 seconds. Obviously this isn't a benchmark and you and I know the many variables in the system, but I can feel it's significantly slower and too slow when I have to rely on it for logging into everything.

This is on a pixel XL running Android 7.1.2(beta)

This was also with a near empty database, without any locking enabled. Lastpass I think is faster if I didn't have fingerprint enabled.

I'm free to test or debug (like provide logs, etc) if necessary. I can't speak as to if this is a regression or not (I haven't used it significantly since I was waiting on auto fill)

Custom domains doesn't work on my Android device

Hi,
I don't get it working. Here is my issue:

• Turtl app.
• From a web browser, I'm logged from this URL. Framanotes is using Turtl to host notes for its users.
• I added an Equivalent Domain from the web vault: mes.framanotes.org, androidapp://com.lyonbros.turtl, com.lyonbros.turtl

After pressing the bitwarden notification on my Android device it doesn't find the equivalent domain mes.framanotes.org:

Logins for com.lyonbros.turtl

bitwarden 1.4.0

[Feature Request] Ability to Add/Edit Credentials when no Internet Connection

Add Ability to Add and Edit Credentials when no Internet Connection. Because of this we are not able to add or edit data when no Internet Connection. Maybe in developed countries all have internet on their phones but coming towards developing countries like india not everyone have internet everyday on their phone.

[Feature Request] Keyboard integration for entering user credentials

Adding a keyboard feature like keepass2android will be a good move. The one benefits of this feature is security and the other is , we all know that auto fill wont work on some apps, example UC browser. If we have a keyboard feature we can switch to that keyboard and get user credentials.
I have tested the keyboard method of keepass2android with UC browser and got worked so that I'm requesting this for our bitwarden.

Refer : keepass2android

Allow selecting Notes field in 'view login' mode.

Currently the Notes field in a login behaves oddly, at least on Android. Touching the text field highlights the field but won't let you select any text. For that you have to go to edit mode. It should allow you to select text but in a read only mode.

[Feature Request] Ability to Save Password Database on Own Cloud Storage

Giving the ability to save password Database on users own cloud storage like Drive, Dropbox , onedrive etc will be a good feature for a open source project like this .

Refer : Keepass2android & Enpass

Swype keyboard shows password as suggestion when focused

The custom keyboard, Swype, doesn't appear to be respecting the password fields properly and therefore will show the suggestion bar above the keyboard. In the suggestion bar is the current value of the field.

Add option for allowing screenshots

I would like an option for allowing taking screenshots of the app.

Lastpass let's you enable or disable taking screenshots of the app (disabled by default of course).

Logins search should search all fields

I've noticed that, at least for a login site I have stored, searching for the URL in the app, will only find it by name.

It should probably be searching for URL too. As well as the notes area itself. This is what lastpass does, makes it much easier if you only remember the URL.

Move ISettings access to AppSettingsService

Currently the app makes lots of calls into the ISettings library throughout the app. Abstract this all away into the newly created IAppSettingsService

High battery and Ram usage

There is high battery and Ram usage even if the app is not used.

iPod Touch 5th generation support

I have an iPod Touch 5th Generation and it's not compatible with it. I'm sure it's working with it.

Please make Bitwarden compatible with it.

Thanks and sorry for my poor english.

Noam

Windows 10 Support

Well, this whole thing is written in C# and Xamarin...

Why is there no W10/M version of this app? an UWP app maybe?

Compatibility

The 1.0.0 version requires iOS 9.0 or later and is only compatible with iPhone 5s or later.
Is it possible for older devices and former systems to run this phenomenal app?

IOS Auto-Filling Not Working With Firefox or Brave

I have enabled the app extension option for IOS and confirmed it works with Safari and Chrome but no sites are found when using it with Firefox and Brave. I tested with an Ipad Air 2 that is up to date.

Alternative to using Clipboard on Android

Using the clipboard on Android is a security risk, in Lollipop there is a solution:
https://blog.agilebits.com/2014/11/22/avoiding-the-clipboard-with-1password-and-android-lollipop/

Site Search

Use site search index to assist with adding new sites. This will assist users with pre-filling a proper URI for the site.

F-Droid Support

Any chance of adding this to F-droid?

Suggest fingerprint with alert after first log in

App Security Lock Options doesn't work

I have this feature set to lock the app in 1 minute. However, the app does not lock automatically and I have to manually lock the app.

Secure note edit notes field too small

When you create a log in and enter data into the notes field.. When I go to view the note, it shows the contents in a big text field.. That's fine.

But when I click edit, it shows the note contents in a super tiny edit field, which is uncool because my note has a lot of contents in it 😀

(I've imported from lastpass and their secure notes)

Android O: Autofill API

Hooray, Android is getting proper support for password management apps!

https://developer.android.com/preview/features/autofill.html

Currently only available in beta builds of Android O, for very specific Google devices. It'll be quite a while before we see phones actually running whatever the next dessert will be called, so the accessibility service will stick around.