"Update your encryption settings" on purpose?

Hello, I may have messed up. I have Bitwarden on Android and on Linux (via Flatpak Store). I do not use the web manager. Earlier this week I got several popups on Bitwarden for Android telling me to “update my encryption settings”. Looking online this appeared to be something with the number of “rounds”, it sounded good but I was too busy that day so I said “Later”.

Today I logged into Bitwarden on my phone planning to activate the “update encryption”. But I do not get the popup anymore. I get nothing.

Did I miss my chance somehow by saying “Later” too many times? Or did I maybe activate it by accident and that’s why it no longer asks? How do I even tell which level of encryption I have? I want the “updated” encryption but now I don’t know how to get it.

You need to log into the web vault to see it. See these detailed instructions to get the screen shown below.

From the link above:

If you instead click Later, this message will appear again after 24 hours to encourage you to protect your account. Alternatively for your convenience, you will not see the prompt and the increase will happen automatically if you unlock or log in with your master password.

So, supposedly, it nags you until you relent or you unlock/log in with your master password; you may have done either. One way or another, you should be updated.

Anyway, please let us know what you see in Settings > Security > Keys > Encryption key settings above.

Hm, okay, thank you. I don’t use the web vault so I’ll try to figure out how to get this information

Oh, there’s another place you can look: the data.json file for your desktop app. Mine has something like this (for Argon2 KDF), but I’m not sure what the current Bitwarden default would have:

:+1:

Though…

… using the web vault is not rocket science – just log in to vault.bitwarden.com (US server) or vault.bitwarden.eu (EU server).

(There are still some things that can only be done in the web vault, like changing the master password, setting up 2FA for your BW account, adding login-/unlock-passkeys, changing the KDF…)

It’s harder and more dangerous than rocket science when you have a pixel 8 with a 6.2" display

I probably wouldn’t do extensive vault item operations, but the administrative things (like changing the KDF) would also work well enough on my Fairphone 5 with a 6.46" display. (I just logged in there)

I had to delete an organisation :anxious_face_with_sweat: