Currently, Bitwarden handles password concealment inconsistently across platforms:
On the Windows desktop app, concealed passwords always display as six dots (••••••), regardless of length. This prevents someone from deducing password length.
On the Android app and browser extension, concealed passwords match the actual length (e.g., a 12-character password shows 12 dots), which could unintentionally reveal information about the password.
For consistency and security, I propose that Bitwarden adopt a unified approach across all platforms—using a fixed number of dots (e.g., six) instead of reflecting the actual password length.
@abishekh_kc Hey, actually, there is a recent bug report to that (mainly for the browser extension, but the issues seems to be in the web vault as well):
As a Bitwarden employee already answered there, they do seem to see it as a bug. So it probably should be reported for Android as well. - If someone can check it, would be interesting to know if it’s the same on the iOS app (and then it should be reported as well).