Can the tab header for “Security” → “Master password” on vault.bitwarden.com be changed to something else that makes it more intuitive to find “Log in with passkey”?
I just spent the last… way longer than I care to admit… testing a variety of scenarios with my hardware authenticator and then reading the community rules and researching past bug reports and typing up a bug report/feature request… all to finally realize that adding my key under “Two-step login” was not the right way to achieve passwordless login.
I’d also propose that the “Passkey” option not be shown during login and unlock prompts if it isn’t going to work anyway. Bitwarden web and browser extensions seem perfectly capable of detecting when a passkey has been added to the account, but don’t seem to realize that it was added as a 2-step option and isn’t going to work during the login phase.
I’m not entirely sure what exactly you mean here (since a 2FA-passkey is expected to work during the login phase – honestly, I’m not sure what else you could do with it)?! – The somewhat confusing thing is: a login-passkey and a 2FA-passkey are not the same credential (probably especially if you compare a login-passkey with encryption/PRF and a 2FA-passkey) – and they don’t serve the same purpose.
I agree, in part. At least on the unlock screen, the Unlock with passkey button should not be shown if the logged-in account does not have any login-passkeys registered.
On the login screen, however, it is impossible for Bitwarden to know which account the user wants to log in to, so the Log in with passkey button must be available in case the user wants to access a different account, which does have a login-passkey.
Upon further reflection, I think Bitwarden’s “Unlock” UI is probably working just fine. I forgot that when i finally found the passkey option under “Master password”, there was another key still registered. So when I attempted to unlock my vault, displaying the “login with passkey” option was correct.
The unlock screen on the Web Vault (on the left in the screenshot) does not have the Unlock with passkey button, but the browser extension unlock prompt (on the right in the screenshot) does have an Unlock with passkey button:
