Using passkey to log in bitwarden vault web app pops up windows security instead of bitwarden extension

I’m on firefox 134.0.2, windows 10.
Bitwarden firefox extension 2024.12.4.
I have a passkey registered in a login item matching the URI vault.bitwarden.com

When trying to use the passkey to log into my vault on the website app https://vault.bitwarden.com/ the attempt is directly delegated to Windows Security.

Login in to the vault website with e-mail + master password + TOTP is working.
The WebAuthn in this process is also direcly delegated to windows and I have to choose using another 2-step login method.

My Settings > Notifications > Excluded domains is empty.

With the same config, passkey login with bitwarden is working on github so I infer the problem is specific to the extension and the vault web app.

Is it a bug or a feature? (I could understand not allowing a passkey in bitwarden to log to bitwarden to avoid being locked out of the account.)

Yes, due to the circular dependency, using a Bitwarden-stored passkey to log in to your Bitwarden account is not supported.

1 Like