Has anyone got the “Use for vault encryption” option to work with the 2024.1.0 web vault? If so can you share which browser and OS you used. PS I tried 2 yubikey 5’s which are PRF enabled. [image] [image]

[image] Moose: in Windows 10 with the Brave browser, it still won’t decrypt my vault without entering my master password I have found that passkey encryption will not work on Windows 10 using any browser. I tried 4 PCs. I upgraded one to Windows 11 and encryption started working after the up…

[image] tschap123: As for the 2024.1 extension not offering to save the passkey in BW … would have to try out if this is a generic issue when saving ANY passkey in BW (which would be a bug) or just when trying to save a passkey for BW vault login - the latter would make sense somehow since I wou…

[image] grb: Interestingly, if you store a Bitwarden login passkey for somebody else’s Bitwarden account in your own vault, such a passkey cannot be used for encryption ! Might be a good thing. Does a software bound (aka copyable) passkey have sufficient security for the highest needs?

I noticed something strange when using Chromium on Fedora Linux to configure Log in with passkey. When I turn it on, a window pops up asking me to enter my master password, but below that I’m only given the option to send a validation code via email and a window to enter that validation code. Anyo…

I’m not suggesting that every platform capable of storing syncable passkeys should also support passkeys that have encryption, but I would expect Bitwarden in particular to offer this functionality. If security of the implementation is not sufficient for whatever reason, then the security needs to …

[image] soluschristus: When I turn it on, a window pops up asking me to enter my master password, but below that I’m only given the option to send a validation code via email and a window to enter that validation code. How are you logged in to the Web Vault? If you logged in with a passkey o…

[image] grb: How are you logged in to the Web Vault? If you logged in with a passkey or logged in with a device, then Bitwarden is not able to use the master password for verification, and in such cases it will fall back to an email code. I’m logging in with a device, so that explains it. Th…

I had a issue setting up encryption using my yubikey. The solution that worked for me: Install Oracle Virtual Box Download Ubuntu 23.10 Start Virtual Machine and pass Yubikey to it from the top menus Install Chromium inside VM Setup yubikey passkey with encryption enabled Conclusion: WINDOWS SUC…

My understanding is that when using a Passkey to login with the PRF extension, a 32 byte secret key would be used for the encryption. Can anyone explain how this would increase (or possibly decrease) the level of security used for the vault encryption over a strong master password? Thanks! Edit: …

@soluschristus The gory details are available here (clicking the link below will take you directly to the section about passkeys): [image] Bitwarden Security Whitepaper | Bitwarden Help Center The Bitwarden Security Whitepaper highlights the security and compliance program, elaborating…

Thanks for the reply grb! Very helpful, like all of your many other post that I’ve read. :smiley:

Login with Passkey, "Use for vault encryption"

Ask the Community Password Manager

soluschristus January 14, 2024, 12:34am 54

I’m logging in with a device, so that explains it.

Thanks!