I want to use the biometric authentication without having to log in to the desktop app first.
It seems unnecessary to me that the desktop app has to cache the Vault locally and also be logged in so that it can perform the browsers biometric authentication. From this point of view, two logins are necessary.
It may be possible to install only a agent that can be triggered by the browser extension, to handles the biometric authentication.
At the current moment its really about access levels and APIs to Hello/Touch ID - the desktop app is the most reliable way to connect to those APIs vs. browser-based integration. Though, there is a point in having the desktop be the ‘central station’ for convenience - but that is more of this feature.
We’ll see how the browsers progress with support for Biometrics, though!
Maybe my request was misunderstood. I think I understand the reason why an app is needed so that the browser can access the biometric API through it. That’s ok, the problem is why does the app need to be sign-in to bitwarden first and also include the full vault? The agent I’m describing would still be a Win32 app that accepts the authentication request from the browser and communicates with the Windows API, but it doesn’t require any additional bitwarden login and no vault.
It would be great if users could unlock their vault through the Bitwarden browser extension without having to open the Bitwarden desktop app (or even without having the desktop app installed at all).
Is this something that is even technically possible? I think so but I’m not sure.
Nevertheless, if it’s possible, this should be implemented, as it can only benefit users (if it is not at the expense of security compared to the previous implementation where the desktop app is needed)!
- but that is more of