Hi there,
I don’t quite like the fact that if my Bitwarden Firefox extension is unlocked before I put my Macbook to sleep, it will remain unlocked when I wake my Macbook (i.e. I log into macOS) again.
Is this a bug or a feature? I’d hope that when I put my Macbook to sleep that the BW extension would also lock - like it does in e.g. 1Password.
Using Firefox 84.0.2 on macOS High Sierra.
I see that in Chrome (Mac) there is in fact a Vault Timeout option of “On System Lock” and it works, but why is this option not available in Firefox??
@mk20 Same behaviour on Windows with Firefox, after a sleep the vault is still unlocked (if set on browser restart) and if Firefox wasn’t closed before the sleep.
I’m digging up that topic as this issue is still actual.
I’m on Linux (Fedora) and after the system went to sleep when i login the bitwarden firefox extension is still unlocked which looks to me a security issue.
This doesn’t occur on Chromium as the extension has the option to be locked if system goes to sleep and it works well.
Do you know if there’s any chance this issue get fixed on the firefox extension (as i prefer use this browser) or should i go with using chromium browser ?
Thanks for your help
@Pikoon Welcome to the forum!
Looks to me like this is currently not possible due to a bug in Firefox: 1395199 - idle.OnStateChange / idle.IdleState does not support "locked" value in Firefox (and if I understand it correctly, this means, that Firefox doesn’t “recognized” when the system locks/goes into “sleep” – therefore the BW extension can’t know that either as it doesn’t get that signal from Firefox)
Hello @Nail1684 !
Thank you very much for your answer ! This must be the reason why. Sad to see that this bug is still ongoing since 8 years…
The weird thing is that, at my workplace, we use a different password manager (don’t know if i can mention it here) and the feature auto-lock on sleep does work with its Firefox extension. That’s why I was wondering if it was possible to have it as well with Bitwarden.
But I guess this would require investigation and it probably won’t be in your priority list.
Anyway, again thank you very much for your reply, I guess I’ll go with chromium to have it working.
Cheers !
Yes, firefox does not support the API necessary here. @Pikoon Does that password manager (you can mention it by the way) integrate with a desktop client, or is it really just the browser extension? Integrating with a desktop app would be one way to get this implemented.
Hello @Quexten, thanks for your reply !
The password manager is 1Password. I don’t remember having the desktop client, only the extension for firefox browser. I’m currently on holiday so cannot be 100% sure about not having the desktop client, I’ll check that when back to work in 10 days.
Cheers
Happy new year and sorry guys for the late answer!
So for information, you were right @Quexten. I do have the 1password desktop client installed. I uninstalled the desktop app and the firefox extension itself doesn’t auto-lock on sleep, but once the desktop client is installed, this feature works.
Hope this might help you.
Have a nice day,
Cheers !
It appears this is “not possible” in the same way that “unlock with biometrics” is not possible solely within Firefox. Since there is a path-forward (integration with desktop app), would it make sense to remove the mod notice?
@DenBesten I just updated the notice. Let me know, if this is sufficient for you.