Password vault not syncing at every login #457
Comments
|
I noticed the same thing using Android 8.0.0 on a LG G7. I often have to manually sync first to have all new passwords. But not always, sometimes it gets synced immediately. This also leads to the problem that when deauthorizing all sessions in the web vault, the active session on my mobile does not get deauthorized immediately. I first need to do something that triggers communication with the server (like manually syncing) that I get logged out. Would be nice if deauthorizing would lead to logging out immediately. |
|
Same Problem Herr, please give us an option to enable sync on every app start and Everytime autofill is searching the vault |
|
No solution after 4 months? What is going on? Are you folks not supporting Bitwarden anymore? That would be a shame because it has so much promise. Do we need to pay to get support? If so, I will, because I think this is far superior to LastPass, or at least it could be if you get the glitches worked out. |
|
Actually found that by deleting the app, redownloading it from the cloud, installing and logging in, the bug was fixed — at least temporarily. One of the first things that happens when you log in is it asks you to accept notifications in order to enable AUTOMATIC VAULT SYNCHRONIZATION. When I allowed notifications, BANG! All my recently added logins appeared. The app must have gotten out of whack somehow because I know I never turned notifications off for it. |
|
Same problem on Android 8. |
|
Hi folks, First of all, I would like to congratulate the dev team for this fantastic password manager. 👍 Back to this issue: I'm running the latest apps on my Win laptop (Win10 Home & Pro), my android Tablet (Android v9) and my iPhone 7 (iOS 12.3.1). Like some users, I got an issue with the iOS iPhone app (v2.1.2 build 53).
In my case, the pull mechanism is not working as expected, however the push is OK. |
|
@LapinFou What if you reinstall the mobile app? Does it work then? |
|
I already try (without rebooting my iPhone), unfortunately this didn't solve the problem. |
|
@LapinFou Are you using Bitwarden Cloud or On-prem hosted? |
|
At first, I tried the On-prem solution on a Synology NAS, but I decided that Bitwarden could be fully trusted. So, I switched on the Cloud version with the Premium subscription ( TOTP authenticator is a so cool feature 😃 ). |
|
I forgot to mention that this issue is still the same using TouchID or with typing the master passwd. |
|
After you reinstalled, did you get prompted to accept push notifications upon logging back in? |
|
Yes, the push notification windows pop-up just after the reinstallation. |
|
Unfortunately, I am still not able to reproduce the issue. WE'll have to keep looking. |
|
This is the worst kind of bug. 90% of the job is to be able to reproduce it on demand. |
|
If this can be any helpful, from my iPhone, the modifications are immediately push on the vault. However the sync date & time is not updated on the iOS app. |
|
@LapinFou That is the expected functionality. The timestamp you see under Settings > Sync is the last time a full sync has occurred, not an incremental sync like when modifying a single item. |
|
OK. Got it. Thanks for the information. |
|
After upgrading to iOS 12.4, it looks like it was working better, but finally not 😢
I hope this can help. |
|
As a workaround, it could be nice to force a synchronization when holding and sweeping the finger to the bottom. Same gesture than for the iOS mail app. |
|
@LapinFou I tried these steps and wasn't able to reproduce. All actions synced via push notification. Will have to continue to investigate. |
|
Damn it... 😞 I tried again few minutes ago, and I can reproduce the issue following the procedure described above. For sure, there is something which is consistent. As long the BitWarden app is opened, the sync is working. |
|
Just wanted to chime in and report i'm having the same issue on iOS and an iPhone XS. Something that i've noticed that hasn't been mentioned here though:
This is a really, really, REALLY annoying problem and makes me extremely uneasy about using Bitwarden in a work setting (as opposed to personal), as I won't always have time to dick around with it, uninstall the app, re-install, etc, while i'm sitting with clients or trying to log in during a presentation. This bug was reported 6 months ago, i hope Bitwarden are taking it seriously. |
|
Still have the same problem on Android 9 now with the latest Bitwarden version. When I made a change in Safari Browser extension and open Bitwarden on my phone, I don't see the changes. I need to sync manually to see the changes. Bitwarden stated that the last sync was on Aug 7, although I just unlocked Bitwarden on Aug 12. Of note: On my iPad running iOS 12 everything seems to work properly. Don't have the same problems there. I will try to reproduce the problem there as well, but I didn't notice it thus far. @kspearrin Wouldn't it be possible to add a feature that Bitwarden automatically syncs when unlocking the vault? By that at least everything would be synced at login or unlocking. Push-sync would still be nice but part of the problem would be solved by that. Would really appreciate if such a force sync at login or unlock would be implemented. Thanks a lot! @lumpycustard No need to uninstall, reinstall every time. Doesn't a manual synchronization work for you as well? You will find the manual sync under settings. Just hit the button 'Synchronize' and all your changes and new passwords will appear. |
|
@chewiesGit what is the point of the refresh animation that triggers when you pull down on the password list if it literally doesn't do anything? Why doesn't the "pull down" action trigger an actual sync? What is the pull to refresh action actually doing?
|
|
Pull-down refresh re-loads the list from the local database. It doesn't sync data from the server. |
|
A forced sync on a pull-down-gesture would help a lot if there are synchronization issues like described above. |
|
@kspearrin Thanks for confirming, but what exactly does that achieve? My phone is already displaying the local list, and the local list is missing data stored in my Bitwarden account. In other words, if i'm viewing this thread and i get an email advising that you've replied to me, when i refresh the page, my expectation is that my browser will reach out to git to receive an updated version of that page, as the page my browser is displaying is out of date. It doesn't make any sense to me that refreshing Bitwarden via the pull down gesture simply reloads the data that i'm already looking at -- however i am a layman and more than likely am completely missing the point. Either way, i have purchased the pro version of the app and fully support the OSS movement, however this current bug presents a very annoying and (in my view) easily resolvable problem. |
|
@kspearrin FYI, the issue is still present with the version 2.2.1. |
|
I actually have the same problem with updated iPhone xs max. Hope there will be a solution to this. |
|
Bitwarden v2.3.1 was relased yesterday in the Dutch AppStore. |
|
Same as @Panja0 version 2.31 release on the French AppStore. Despite this, BitWarden is still the best password manager on the market. 😄 |
|
The v2.3.1 update does not address the problem (UK). What happened to making the app sync on unlock through the long-promised v2.2.6 update that none of us got? Is this issue still being worked on? Why is it being actively ignored now? |
|
This is a major bug on all mobile platforms. Each time: a login is recent (< 1-2 weeks), "fill with" is invoked on an input, Logins are empty and main use case for app is broken. (Reproduced on Android, iPad) |
|
Same issue here, update a password via the Mac-Chrome extension on my desktop, then try to fill a password via Android App... and it's outdated. I tried locking, etc... nothing seems to automatically or manually sync. This is a very core feature, is there any official response for when this will be resolved? |
|
@mportune-bw I see you self-assigned this in March, good to have you on board! Two questions:
|
|
@joallard While there's nothing officially scheduled, we keep sync issues under observation because we have such a difficult time reproducing them... which I guess leads me to your second point - if you've discovered a reliable way to reproduce the issue, we're all ears. |
|
Is there a detailed guide on how to setup a dev environment? Im not a VS guy but want to fix this because it is very annoying. It been nearly 2 years and this isnt fixed. I can reproduce it. |
|
@mportune-bw ? |
|
Hi @muzzah , VS for Mac makes it pretty easy to work with Xamarin (since it is basically Xamarin Studio renamed); if you want a full local environment; that's a little more challenging, but you should be able to run the mobile app against production if you feel the issue is somewhere in the mobile app code itself. Xamarin has built in emulators and if you're debugging against Android, it's pretty simple... if you're debugging against iOS, there are many articles on setting up Xcode, an Apple Developer account, registering the appropriate certificates for code signing when running locally, and Xcode has pretty nice support for iOS emulators which VS for Mac supports out of the box. |
|
Okay, Now I see different sync issue. Any password updated or deleted in another system/browser is not updating in mobile client autofill. During autofill i still see old/deleted password. This is so annoying lately. Some of my accounts locked out for try trying autofill multiple times with outdated password. I tried to manually sync through Pull to refresh and Clicking on Sync button, and i see updated password when I manually search but not during autofill. It seems I have to logout and login for the passwords to be in sync at autofill. |
|
@pavankjadda , are you using v2.7.2? |
|
Yes 2.7.2(401) |
I switched to Strongbox instead. Very happy now! |
|
Actually I don't have any sync-issues anymore. Maybe thats why nobody is posting gere lately… |
|
By the way, with the latest version you can enable the manual sync when sliding the finger from top to bottom. |
|
I still have sync issues (now on iOS) but the manual sync made it ok for me to deal with it. However, and I said that already exactly 2 years ago, the sync issue causes a very problematic security issue in my eyes. Clicking on deauthorizing all sessions in the online vault will not automatically log out all devices (such as the mobile app, the browser extension or the desktop app) until they finally sync and contact the server. I tried it out recently again. After deauthorizing all sessions in the online vault, I was still able to unlock my desktop app (and browser extension), view all my password and work with the app for several minutes until the app finally logged out since it apparently contacted the server. In case i lose my mobile device, for example, I just cannot feel confident that all sessions were indeed deauthorized as they should due to this issue. Is somebody else experiencing this? Did somebody try that out? Would be curious to know if this is happening to others as well. Or maybe I should consider Strongbox, too... |
|
Well, the main security is a very strong master password (with 2FA). |
|
Sure, I know that a securely locked vault is the main security. But why taking the risk? I guess that most people don’t log out every time after using the app, they just lock it, requiring only a finger print or a pin to unlock it. This is the only reason why the deauthorizing function actually exists or was made for. It is supposed to make sure that all devices that are just locked with a pin or finger print (or even unlocked if someone prefers that) get properly logged out. I would just feel much more confident if I knew that all devices are indeed logged out such that the master password as well as 2fa is required to log in, not just a pin or a finger print. I know that there are many risks using a vault like this. But why not eliminating those that we know of and could be eliminated easily. It’s just not very nice to know that a silly bug like this makes the whole thing a bit more unsafe.. |
|
I understand your point. AFIK, this bug is only for iOS and, for sure, must be corrected. |
|
It at least also exists on MacOS. My iPhone actually syncs much better than the desktop app on my Mac… Anyway, you are right, it’s not a major security issue. That’s why I am still here after 2 years :) At the same time, I find it a bit frustrating that even after 2 years, nobody seems to take interest in a bug like this. Don’t need to be fixed first thing. But after 2 years? Well, at the same time I also know myself that deauthorizing wouldn’t have an effect either if somebody just unlocks your vault offline. A real solution to this problem would therefore be when the different apps only work online and show the passwords only after syncing with the server. But that of course is unfeasible as it would mean than one could not view passwords offline.. So I guess in case I lose my phone, I should deauthorize all sessions and at the same time change all existing passwords. So even if somebody somehow unlocked the phone offline (which I know is unlikely but it could happen if someone for example watches entering the pin), they would only see an old version of the vault. However, that doesn’t mean the sync issue should not be fixed as soon as possible. 😂 |
|
I think the Bitwarden dev team is struggling to reproduce the issue. |
|
Today I did some testing on this issue, and it seems to happen if there are two or more Bitwarden apps unlocked and sharing the same external IP. For example, when my Android phone and my Chromebook are both connected to the same WiFi hotspot, the Android app always syncs (maybe because it uses the Google Cloud Messaging instead of web sockets) but the Chrome extension on the Chromebook fails to sync. If I lock both and switch my phone to use the 4G network (different IP), everything works as expected. On the other hand, on my Windows PC, where I often unlock the desktop app, the Chrome and the Edge extensions, I rarely see the syncing to work properly. |
|
Closing this since I don't see this issue from 2.9.2 version |
|
I see this issue in the 2.9.1 version, just reproduced. (iPad) It seems like 63449a3 is the only change from 2.9.1 to 2.9.2. Did I miss a fix? |
|
Just observed this too in iOS 12 / 2.9.1 |
|
We are at iOS 16 and I am experiencing the issue for first time in the last three years I have had the service. Of course my subscription is expired. It is being forced by developers?! update: this is happening on Keeper the constant uninstall and reinstall - are we developers or chefs? |
|
I didn’t realize an open source application existed for a password manager 🤦🏾♂️ |
Whenever I add/update a password on a Laptop or Desktop, it’s not automatically syncing to my iPhone even though I authenticate my phone with FaceId. Push notifications are enabled to the app.
I am using iOS 12 on iPhone X
The text was updated successfully, but these errors were encountered: