Secure Notes visible in View even when Master PW is enabled for editing

Ask the Community Password Manager
1

In android, when I enable Master PW confirmation for editing, I can still select View option and the entire note is visible without entering the MPW. In Lastpass, the note is not visible until the MPW is entered (assuming MPW confirmation is enabled).
As a matter of security, I would prefer the secure note not be viewable until the MPW is entered.

3 Likes
2

Thanks for the feedback, the team is planning to revamp the reprompt down the road to protect the whole vault item.

2 Likes
3

Glad to hear that is being worked on in the future. This happens on the desktop client too.

image
image1024Ă—1024 38.8 KB

4

@arttu-karpinlehto Welcome to the forum!

In the meantime, you can create a custom field of the “Hidden” type (select “Hidden” from the custom fields dropdown menu, and then click the :heavy_plus_sign: symbol); if you enter the sensitive information as the value of the hidden field, it will not be possible to view the information without re-entering the master password.

5

This is still a problem on IOS

6

This is now fixed on the desktop (browser extension, at least), but still a problem on mobile (Android, at least). Is this still in the backlog?

7

@Gideon A belated “Welcome to the forum!”

I just tested this on Android with version 2025.8.1, and the Secure Notes are no longer visible for me. – I too can’t say it for the iOS app…

There is a feature request, tracking that down:

8

Yes; this was fixed a while ago, see also Master Password Re-Prompt not working in Desktop Firefox Extension and Bitwarden Android Mobile App · Issue #7799 · bitwarden/clients · GitHub

1 Like