Automatically submit login form on auto-fill

Interestingly, this is implemented with using passkeys via the inline autofill menu. (when you click on the passkey suggestion it “auto-submits” and logs you in on that site)

PS: @joexcm Welcome to the forum!

… which somewhat contradicts @gtran’s reasoning here:

But to be fair, passkeys do have a different security level and shouldn’t even work on the “wrong” site (including: the private key never gets transmitted to the site anyway).

I’m currently testing out BW due to the price increase for 1password, I’d say this feature is the one thing missing, everything else is OK. Devs, please add this feature!

+1 for me too, BW is great… this one just missing

An incredible number of people are currently looking at Bitwarden as an alternative to 1Password, since 1Password has drastically increased its prices.

I also took a look at Bitwarden today and I’m shocked! Aside from the fact that the UI (I’m a software developer myself…) looks like it’s from the 90s and is truly awful and absolutely uncompetitive, countless essential features that are already familiar from 1Password are missing. One of them is auto-submit. I’m shocked that this has been discussed here for over eight years and it’s still not implemented. This reflects extremely poorly on Bitwarden. Are customer requests and feedback unwelcome? Over the years, an employee here has stated that it’s a security issue. But that’s factually incorrect. It was said that manual submission gives users another opportunity to check if the page is correct. However, that has absolutely nothing to do with auto-submit! As a user, I go to a website and proactively select the login credentials for autofill. It’s my responsibility as a user to check beforehand whether the page is correct. The submit function is completely irrelevant because the login credentials have already been entered into the fields. If there’s a security issue, it’s at this point. Auto-Submit has nothing to do with it, since the user always manually clicks submit after autofill anyway.

@Snoopy87 Welcome to the forum!

You’ll be disappointed to learn that the current UI is the result of a major redesign from only a little over a year ago…   :sweat_smile:

With all due respect, you have spent less than 5 min on this user forum, and all of 0 min as a customer, so you may not yet have a full picture of Bitwarden’s responsiveness to customer feedback.

I think that the security issue comes into play for users who have also enabled “Autofill on Page Load” (i.e., automatic autofill). But I agree that a case for auto-submit could be made, if simultaneous enabling of auto-submit and Autofill on Page Load were blocked (or at least accompanied by a prominent warning).

As pointed out in another comment, in some cases, auto-submit could even enhance security for organizations. And another comment points out that auto-submit already exists for passkey autofill.

@dwbit Perhaps the team could have another look at this matter?

1 Like

Yes, my account is new because this is the first time I felt the need to comment. I’ve also only been using Bitwarden for a few days, and since today I’ve been intensively exploring the apps and browser extensions. As I mentioned, I’m a software developer myself, so I don’t jump in headfirst. I do my research first, and for example, I’ve read this entire thread—the whole conversation of the last eight years! Every single password manager can do this, and others, like 1Password, which are market leaders, are considered absolutely secure and are regularly audited. Therefore, I find it absurd that only the Bitwarden team worldwide seems to have these security concerns. However, I actually don’t think autofill on page load is a good idea and it’s counterproductive, since I often have multiple logins for one service (e.g., admin & user, or personal and work accounts with Microsoft). As you suggested, combining auto-submit with autofill on page load could be prohibited.

But I also researched other aspects of the test that bothered me, such as the outdated UI, extensively and read a lot about how it’s been criticized for years and how there have been redesigns (which makes you wonder what exactly constitutes a redesign now, how bad must it have been before?). From this, I concluded my question: Is feedback not taken seriously? I think I’m entitled to ask this question, regardless of how long I’ve been registered here. After all, every new potential user will ask themselves the same questions and come to the same conclusions. 1Password is the undisputed number one, and Bitwarden currently has the enormous potential to gain many new users, all of whom are considering leaving 1Password because of the price increase. It’s a crucial phase right now, and they shouldn’t just offer a solution for IT nerds, but also for the average user who has been using 1Password precisely because it’s so modern and integrates perfectly with all systems. The user isn’t even concerned with any specific fields that they can save, but simply with the daily workflow, and that includes UI, Auto Submit (also with Microsoft’s 2-step login), Browser Extension Auto Unlock when the app is unlocked, and iOS Safari Browser Extension.

From a purely business perspective, Bitwarden shouldn’t miss this unique opportunity to acquire many new customers at once. Therefore, they should urgently discuss internally what they can offer these potential new customers to entice them to choose Bitwarden over other platforms.

Yes, of course, you are entitled to ask that question. But please do so in a new topic over in Ask the Community, as that question has little to do with this feature request.

As you compose your question, you might review this search, as it enumerates many of the Feature Requests that Bitwarden has implemented.

1 Like