Password entered into Bitwarden username field

[DenBesten]

@DenBesten

Erroring out on setting a master password with exactly one @ sign might be an interesting feature request.

I created said request. Go vote for it if you think it has value.

Disallow Master Passwords that look like an email address

When logging into the webvault, or any of the apps/extensions, one must supply an email address and a master password. The email address is checked on the client side to ensure that it has exactly one @ sign before it can be submitted. The Master Password is never submitted (a hash is instead). If one were to create a master password containing a single @, it would be possible to inadvertently paste it into the username field, resulting it it being exposed to adversaries-in-the-middle and pot…