Visually indicate soon-to-expire TOTP in overview (e.g. show countdown timer)

Hello, happy Bitwarden Premium customer here.

I’ve noticed that at the moment Bitwarden does not visually indicate that a TOTP code is about to expire in the main overview (as opposed to the detail view which shows a countdown). Because of this it’s possible that a code I copied using the “Copy Verification Code” button actually expired within the short amount of time it took me to move my cursor from Bitwarden to the TOTP form. It’s a first-world-problem, I know, but I think it would be helpful to indicate that the TOTP code will expire in within, let’s say, 5 seconds. For example by setting the CSS fill property to red.

I am of course talking about the most right button here.
image

Thanks for taking the time to read this feature request!

Most login forms will accept a (slightly) stale TOTP code. I have never had an issue with this.

Is this something you frequently encounter?

2 Likes

Not frequently, no.

I wasn’t aware however that TOTP codes are valid for (according to Wikipedia) up to 30 seconds after they “expire”. I suspected this wasn’t the case since the detailed view does show a contain a visual indication. I’d guess that makes sense in situations in which the code needs to be manually read out, for example when logging in using a different device than the one Bitwarden is running on.

Knowing this, the feature doesn’t seem all that useful anymore. Thanks!

2 Likes

How long codes are valid for is a setting that those doing the website can set. Some will be strict, others less so.

The TOTP is not always 30 seconds, that is specified by the provider (the site you’re login on). Also they can opt to accept expired and/or future codes. So is literally up to the provider, but yes is always nice to see if the code is about to expire (when this happens I wait for the code to change).

It would be nice if, say, there were a ring around the clock icon that animated the time remaining, or maybe the outside of the icon (and clock hands) could animate to show the lifetime.

(Related request: Show timer of verification codes on the main page)

It would be very helpful to have the TOTP Copy Button show the countdown timer instead of a static image. That way we would know the time remaining before coping and pasting. Many times I unknowingly catch the timer on the last seconds and it expires before i paste and enter it, requiring me to repeat the process.

FYI This is in regards to the web extension.

That is a bit confusing. Do you mean the browser extension – or the web vault? (especially since you chose “app:web-vault” as a tag)

Normally TOTP allow for previous code to allow for clock drift or at least a few seconds free before it is denied. But yes I prefer to wait if there is less than 5 seconds left before I copy/paste. Even if it was in a different colour (taking into account those with colour blindness)

One workaround that works until (or if) this gets implemented. The tokencode changes at the top of the minute and the bottom of the minute. So, glance at your clock and if the second hand is getting close to :00, or:30, wait until it has passed.

On windows, seconds can be turned on at: Settings > Time & Language >> Date & Time >> Show time and date in the System Tray >> Show seconds in the system tray clock (uses more power).

@allias @gooseleggs I now moved our posts into this existing feature request on the same topic.