Can't enable browser extension biometrics

B0UNC3R · January 25, 2021, 3:52pm

Problem also exists on MacOS Catalina with Brave Browser Stable / Version 1.19.86 Chromium: 88.0.4324.96 (Official Build) (x86_64).

Latest extension from Chrome store, latest desktop app from App store.

flying-sausages · January 25, 2021, 4:04pm

Thanks for the response! I’m not just a man of words so I submitted a PR with a pull request template which could bring things like these to light. I’m not sure this would have caught the entitlements necessary, but I’m sure a manual process for that can be worked in, and eventually automated. We use it in some of my repositories and just manually writing things out often makes people more aware of what needs to be tested in addition to CI

Sindsyg · January 26, 2021, 7:57am

I now got browser biometric unlock working in Edge Chromium too after v1.48 was officially released in MS Store
Now we just need to have the Vault timeout setting working after enabling biometric unlock. No matter which timeout I choose I always have to unlock my vault if I shut down the browser. If I don’t use biometric unlock the vault timeout setting seems to work fine. I only want the browser to lock when the system locks.

Samplex · January 26, 2021, 9:36am

I got the new update from the Mac App store 1.24.4, installed the edge extension of bitwarden but still no touch id

yes i enabled it in the Bitwarden app and when i go to the Edge extension to enabled to keeps saying i need to enable it in the Bitwarden app

Paapaa · January 26, 2021, 12:12pm

Still not working after the update to version 1.24.4, @go12. I tried closing both apps and turning the Browser Integration option off and back on with no luck. New specs below

BW 1.24.4 from App Store on Desktop
Big Sur (11.1)
Chrome 88.0.4324.96 (also the previous 87 did not work)
BW Extension 1.48.0 for Chrome

christophe · January 26, 2021, 12:32pm

Likewise - but Catalina for me

afghifari · January 26, 2021, 4:01pm

Still doesn’t work. I’ve tried re-install BW extension on chrome, but it’s got stuck on “Awaiting Confirmation on Desktop” when trying to check the “Unlock with biometrics” option

BW Chrome extension 1.48.1
BW 1.24.4 from App Store on Desktop
BigSur 11.1
Chrome 88.0.4324.96

tgreer · January 26, 2021, 6:23pm

Hey folks! We’re working on it

We’ll make a General Availability post on Bitwarden.com/blog when we have it ready for prime time!

Samplex · January 26, 2021, 8:22pm

@tgreer With the new 1.24.5 touch is is working with Edge browser! Only is it possible to enable touch id as primary authentication method? Now when i click the bitwarden icon in edge is have to click on “Unlock with biometrics”, this is not user friendly, why!?!?

go12 · January 26, 2021, 11:55pm

Hi Bitwarden Friends, there was a desktop update today to 1.24.5 that appears to address browser biometrics for Mac. Note that if you have been testing recently, you will need to uncheck and recheck the desktop setting for ‘Enable browser integration’ in the newest app. As mentioned earlier, the news on the Bitwarden blog will be our official announcement

Samplex · January 27, 2021, 2:03am

@go12 Can you make Touch ID as primary authentication so no extra click is needed for “Unlock with biometrics”?

B0UNC3R · January 27, 2021, 5:11am

Hi all, can confirm it’s working now on Catalina with version 1.24.5. Very cool.

A bit of feedback @go12 @tgreer

Agree with @Samplex. The biometrics button apparently can’t even be selected/activated with the keyboard. Please just make biometrics the default option.
Is there a way to disable the MacOS user password fallback in the fingerprint prompt? When e.g. installing BitWarden on a corporate computer, we don’t want others to be able to easily decrypt our password manager that mostly contains personal passwords. Or is fingerprint just as insecure because fingerprints can be added without resetting the authentication? (PS: Reminds me that sub-vaults would be really exciting to have …)
Can you elaborate how much of a security hit we’re taking if the “Require verification for browser integration” box is disabled? Does this mean that any application on the Mac could just hijack the fingerprint authentication (basically a race) and read our passwords? How easy is it to execute this attack?

Thank you!

handgranat · January 27, 2021, 7:01am

Seems to be working with Chrome, but not on Firefox for me:

System

BW 1.24.5 from App Store on Desktop
Catalina 10.15.7 (19H15)

Works!

Chrome 88.0.4324.96
BW Chrome extension 1.48.0

Does not work, same computer

Firefox 85.0 (64-bit)
BW Firefox extension 1.48.1

Actually, with version 1.48.0 of the extension on Firefox I had the option to enable biometrics (even though it didn’t think the desktop app was configured correctly), but after updating the Firefox extension to 1.48.1 the option for enabling biometrics is gone.
Does this mean you won’t be able to support biometrics in Firefox at all?

(but a BIG thank you for doing biometrics at all, a long awaited feature for sure!)

Sindsyg · January 27, 2021, 8:03am

As a new user of Bitwarden I really think the support is excellent. They are really fast and doing everything they can to fix issues. I think we all need to appreciate that

Mario_Dian · January 27, 2021, 8:05am

I’m not sure about Edge, but it works on Brave although you have to manually enable it.

Right click Bitwarden icon → “Manage extensions” → “Allow access to file URLs”

May be worth exploring on Edge too since both use Chromium.

Paapaa · January 27, 2021, 8:49am

Works now also on BigSur + Chrome. Awesome

(If there still was an option to Cmd-Q which would just put BW to Menu Bar. Now despite the options, this actually kills BW. Seems to be a bug IMO.)

Samplex · January 27, 2021, 1:04pm

@go12 @tgreer I also agree with @B0UNC3R when Touch ID is not available e.g. when using a macbook with closed lid with external monitors the fallback should be to the master password not the User MacOS password.

tgreer · January 27, 2021, 2:24pm

Thanks for all the feedback!

Re: Master Password vs. computer password, I’ll raise that as an item to look at, but I think we have to follow the default Touch ID experience, otherwise we’d need to have a way to detect the status of the lid being closed, etc.

kennymc.c · January 27, 2021, 2:25pm

Chrome seems to be working now with App Store version 1.24.5. But in Safari the biometrics option disappeared after this update. Browser version is 1.48.1 in both Safari and Chrome. I only noticed that biometrics has been removed from Firefox but not from Safari. Could this be related to the recent Safari 14.0.2 update? Or will desktop version 1.24.6 fix this which is currently not yet available in the mac app store?

B0UNC3R · January 27, 2021, 8:21pm

I think detecting lid status would be overkill. Maybe you could have a UI button in the fingerprint prompt that allows the user to enter the master password instead. The critical part is not allowing access via the MacOS password.