✅ Require master password "re-prompt" for some items

Just switched from LP and realized that this is missing. I hope it will be implemented soon, I don’t want to go back to LP, this is much smoother experience. I’ve took premium just to support the team since free version has all that I need (except this re-prompt thing) :slight_smile:

1 Like

Don’t hold your breath.

2 Likes

Hi @kspearrin,

Any news on progress for this feature request?
I’m really waiting for this one so I can secure login/notes even more on personal computer.
Ler us know if funds are needed, I can donate more just to see this one working.
This one is one of the most voted/viewed feature request for reason.

2 Likes

+1 really would like this feature to extra protect selected items when some one or IT support uses my interface with my vault unlocked.

2 Likes

As a very patient person and a paying customer I want to ask when can we fianlly expect this feature?

5 Likes

As a means of quickly adding this feature to the existing code base, I was wondering if “organizations” could be used to quickly solve the issue?

So this becomes: “Require pin ‘re-prompt’ for an organization” rather than individual vault entries.

So I can carve off a group of sensitive passwords to an organization. Access to those passwords require an additional pin. Re-prompting conditions can be set for that particular organization. I suppose this same structure could be argued for collections, but organizations seem to stand out as a first step.

The really paranoid/concerned could create as many organizations/collections as needed each with their own pin and timeout.

I am curious if framing the feature to organizations would make it easier to gain the extra level of security/encryption that seems to be hindering the “per entry” method in the main vault.

2 Likes

Same here it’s the only missing feature stopping me switching from LastPass

4 Likes

Also waiting for this switching from LP. Would definitely convince me to take a premium account on BW.

2 Likes

Bought the Premium. Could this feature be added soon?
Just having extra layer of protection is a common sense.

3 Likes

I also wanted to migrate from Lastpass to Bitwarden, but password manager without an password reprompt for some items is too insecure. Please add this feature.

P.S I only need extra layer of security from others people who could use my computer when I will forgot to lock a screen, not a hackers, so extra encryption is not needed.

5 Likes

+1
I’m a free LastPass user and ready to migrate to the paid version of Bitwarden once this is implemented.
Everyone explaining how to act safer and lock your account before leaving and whatever have a point, but that’s definitely not how you bring more customers. A lot of people are still using LastPass because they want this feature and adding it wouldn’t make anyone leave Bitwarden.
I mainly use this feature for when I forget to lock my computer and I only activate it for banking info.

I was dumb enough to leave my computer unlocked?
Ok, you can see my email password, but I don’t want my credit card info expose because my dumb ass forgot to lock the screen

5 Likes

+1

It’s the feature that I am waiting before to migrate from Lastpass.

4 Likes

+1 Big issue for me as well!

I joined today, realised it didn’t have this feature and deleted immediately!

As soon as this feature is implemented Ill back!

3 Likes

Still waiting desperately for this feature to be added to Bitwarden.
I agree with previous comments that say one should never leave the vault unlocked when leaving the computer, but it just happens from time to time where friends/family/coworkers have access to your computer and the unlocked vault. You might want to keep some vault entries and secure notes private, so a master password re-prompt would be a smart feature.

5 Likes

Another reason: If something (malware) takes control of my computer, I don’t want it to just have access to my extra-secure passwords and, say, empty my bank account. To use my bank account, I want to be extra-sure it’s me doing it, not some program running on my computer. Yes, all passwords are sensitive, but some are devastating if they get used without permission.

This is why Yubikeys require a touch – even if you leave it plugged in on the computer, malware can’t use it until you touch the button. It’s not perfect, but nothing ever is – it’s another layer of security.

I want that extra security for some of my items, while most of them aren’t quite as sensitive. OTOH if they all required a yubikey touch to access any password I’d consider using that for all of them too.

4 Likes

Just moved over from LP. This is the the only feature im missing. I use this feature on Banking and government / tax related logins.

2 Likes

Pleaaaase it will really a nice idea

2 Likes

Just making the change over from LastPass, is this still not a feature of BitWarden?

What alternatives are people using?

I have not spent much time with BitWarden, for now I am using the following settings:

  • Lock Options: 5 minutes
  • Unlock with PIN

These are global settings, so it requires a weak password (PIN) for all auth, but better than nothing.

I too want to require master password for Bank and CreditCard logins, I would sign up for Premium in a hot second for this feature.

2 Likes

We all are just ignored … and the security hole remains open. Very sad.

2 Likes

+1 on this, was all ready to self host bitwarden and excited by it’s a no go if this simple feature is missing. Don’t want to stay with Lastpass but going to have to for this very reason. Can’t believe it hasn’t been implemented after all these people asking.

2 Likes