clients icon indicating copy to clipboard operation
clients copied to clipboard

update existing login

Open Dievale opened this issue 1 month ago • 287 comments

Steps To Reproduce

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. Click on '...'

Expected Result

I expect to the site to complete the sign in without prompting to update if there is no user name or password change

Actual Result

every time I try to sign into my bank account, credit card usign the edge web extension I get "update existing login" when I never changed my password or user name

Screenshots or Videos

No response

Additional Context

No response

Operating System

Windows

Operating System Version

No response

Web Browser

Microsoft Edge

Browser Version

Version 142.0.3595.53 (Official build) (64-bit)

Environment Versions

Version: 2025.11.0

SDK: 'main (8ef7951)'

Server version: 2025.11.0

Issue Tracking Info

  • [x] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

Dievale avatar Nov 15 '25 15:11 Dievale

Thank you for reporting this issue! We've added this to our internal tracking system. ID: PM-28289 Link (for internal use): https://bitwarden.atlassian.net/browse/PM-28289

bitwarden-bot avatar Nov 15 '25 15:11 bitwarden-bot

The "Steps To Reproduce" are way too detailed for me.

pamperer562580892423 avatar Nov 15 '25 16:11 pamperer562580892423

On any two step auth site use the Bitwarden extension version with the edge version just sign in without changing your password and you will the prompt to update existing login. Update what if I haven’t changed anything?

Thanks, Diego


From: pamperer562580892423 @.> Sent: Saturday, November 15, 2025 11:05:19 AM To: bitwarden/clients @.> Cc: Dievale @.>; Author @.> Subject: Re: [bitwarden/clients] update existing login (Issue #17405)

[https://avatars.githubusercontent.com/u/138042245?s=20&v=4]pamperer562580892423 left a comment (bitwarden/clients#17405)https://github.com/bitwarden/clients/issues/17405#issuecomment-3536625428

The "Steps To Reproduce" are way too detailed for me.

— Reply to this email directly, view it on GitHubhttps://github.com/bitwarden/clients/issues/17405#issuecomment-3536625428, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AI4F45ER3J4EDECLW6VX6EL345FL7AVCNFSM6AAAAACMGP65HKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTKMZWGYZDKNBSHA. You are receiving this because you authored the thread.Message ID: @.***>

Dievale avatar Nov 15 '25 16:11 Dievale

On any two step auth site use the Bitwarden extension version with the edge version just sign in without changing your password and you will the prompt to update existing login. Update what if I haven’t changed anything?

See, and herein lies the problem. I don't get this "update existing login" dialog on such a site. (of course, it was activated in Settings --> Notifications for me for that test)

Sincere advice: if you don't want your issue to get closed as "not reproducible" you have to provide more details, like:

  1. A specific site where it happens.
  2. Did you check that username/email, password and used URIs are identical (what you enter manually <-> stored in your login item)?
  3. Maybe even create a test login item (with fake data) for a site where you get that update prompt, and where everything (username/email, password, URI) is identical. Nothing too but fancy, but a simple screenshot showing identical data with your manual login could provide some evidence for a malfunction.

etc.

(PS: I'm not a Bitwarden employee, but just another user.)

pamperer562580892423 avatar Nov 15 '25 16:11 pamperer562580892423

Thank you for the reply.

Happened on Bank of America, American Express or any site that requires two factor authentication (I noticed at least for me). This is recent. This prompt never happened before unless you changed your password and of course prompt make sense to ask if you want to update the existing login. 2. yes

Thanks, Diego


From: pamperer562580892423 @.> Sent: Saturday, November 15, 2025 11:55:32 AM To: bitwarden/clients @.> Cc: Dievale @.>; Author @.> Subject: Re: [bitwarden/clients] update existing login (Issue #17405)

[https://avatars.githubusercontent.com/u/138042245?s=20&v=4]pamperer562580892423 left a comment (bitwarden/clients#17405)https://github.com/bitwarden/clients/issues/17405#issuecomment-3536670564

On any two step auth site use the Bitwarden extension version with the edge version just sign in without changing your password and you will the prompt to update existing login. Update what if I haven’t changed anything?

See, and herein lies the problem. I don't get this "update existing login" dialog on such a site. (of course, it was activated in Settings --> Notifications for me for that test)

Sincere advice: if you don't want your issue to get closed as "not reproducible" you have to provide more details, like:

  1. A specific site where it happens.
  2. Did you check that username/email, password and used URIs are identical (what you enter manually <-> stored in your login item)? etc.

— Reply to this email directly, view it on GitHubhttps://github.com/bitwarden/clients/issues/17405#issuecomment-3536670564, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AI4F45DRENODNEP4RYYC4NL345LIJAVCNFSM6AAAAACMGP65HKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTKMZWGY3TANJWGQ. You are receiving this because you authored the thread.Message ID: @.***>

Dievale avatar Nov 15 '25 19:11 Dievale

I also encountered the same situation where, after filling out the login form on any website and submitting it, there is a notice asking whether to update the saved password.

LidoCKT avatar Nov 16 '25 04:11 LidoCKT

I am using the Opera Extension and nearly every website I login to recently, I am being asked to "Update Login" despite not having changed anything!

Icon67 avatar Nov 16 '25 14:11 Icon67

Hi there,

I attempted to reproduce your issue and was unable to do so. I would recommend performing a clean reinstallation of your Bitwarden browser extension using the steps below.

  • Uninstall the Bitwarden browser extension
  • Restart the device (perform a full power cycle, shutting the device down completely and then restarting it)
  • Reinstall Bitwarden from the download link below

Bitwarden Downloads: https://bitwarden.com/download

We use GitHub issues as a place to track bugs and other development related issues. If your issue persists, please write us back using our “Contact support” form located on our Help Center (https://bitwarden.com/help/).

You can include a link to this issue in the message content.

Alternatively, you can also search for an answer in our help documentation or get help from other Bitwarden users on our community forums (https://community.bitwarden.com/c/support/).

The issue here will be closed.

Thanks!

rmcdowell-bitwarden avatar Nov 17 '25 01:11 rmcdowell-bitwarden

I've just moved from Chrome to Edge on my Windows 11 PC and am experiencing the same issue. I've just reinstalled the extension so will monitor.

bonzospb66 avatar Nov 17 '25 12:11 bonzospb66

Also seeing this. Long time Edge user on Windows 11. Getting prompted somewhat randomly to "update" on sites. Today it occurred as soon as the site loaded, before I even auto-filled.

GarlicCookie avatar Nov 17 '25 16:11 GarlicCookie

I'm also experiencing the same issue. Started with version 2025.11.0. Just tested with Chrome on Windows and Linux. Firefox (2025.10.0) doesn't have this issue.

reinob avatar Nov 18 '25 08:11 reinob

what's extremely weird is that this seems to happen only with banking websites (!).

I tried with three different banks and in all of them I got the "update existing login". But with webmail and other accounts everything was normal.

Maybe @rmcdowell-bitwarden can re-check and re-open? Obviously, it's hard to provide precise data to reproduce, because it may depend on the bank, etc.

reinob avatar Nov 18 '25 08:11 reinob

Another thing I forgot to mention. Windows 11 25H2. It happens to me with any page with 2 factor auth

Thanks, Diego


From: B. Reino @.> Sent: Tuesday, November 18, 2025 3:37:57 AM To: bitwarden/clients @.> Cc: Dievale @.>; Author @.> Subject: Re: [bitwarden/clients] update existing login (Issue #17405)

[https://avatars.githubusercontent.com/u/6651880?s=20&v=4]reinob left a comment (bitwarden/clients#17405)https://github.com/bitwarden/clients/issues/17405#issuecomment-3546197581

what's extremely weird is that this seems to happen only with banking websites (!).

I tried with three different banks and in all of them I got the "update existing login". But with webmail and other accounts everything was normal.

Maybe @rmcdowell-bitwardenhttps://github.com/rmcdowell-bitwarden can re-check and re-open? Obviously, it's hard to provide precise data to reproduce, because it may depend on the bank, etc.

— Reply to this email directly, view it on GitHubhttps://github.com/bitwarden/clients/issues/17405#issuecomment-3546197581, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AI4F45FTEGOSUI6BENOQM3T35LLGLAVCNFSM6AAAAACMGP65HKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTKNBWGE4TONJYGE. You are receiving this because you authored the thread.Message ID: @.***>

Dievale avatar Nov 18 '25 14:11 Dievale

@rmcdowell-bitwarden I think we now have some more evidence - and a site to reproduce it, so I would also recommend to test this again and reopen this issue here.

Steps To Reproduce:

When you already have an account with TOTP-2FA for the Community Forum, then try to login to https://community.bitwarden.com/login. I used the inline autofill menu to autofill and of course without editing the "fill".

This triggers the "Update existing login" popup for me.

Then filling in the TOTP code even triggers the "Save (new) login" popup for the TOTP code for me.

More details and screenshots are documented in this post on the forum: https://community.bitwarden.com/t/frequent-notices-to-update-login-with-latest-bitwarden-chrome-extension/90940/7

PS:

Windows 11 25H2 (Build 26200.7171) Vivaldi, Version: 7.7.3851.52 (Official Build) (64-bit) BW Browser extension: Version: 2025.11.0, SDK: 'main (8ef7951)', Server version: 2025.11.0

PPS: After @reinob posted after my post, that it wouldn't be reproducible anymore for them (still "Ask to add login" and "Ask to update existing login" acitve in Settings --> Notifications ?!), I tested it again. Still reproducible. Here a short video:

https://github.com/user-attachments/assets/3fccca61-e667-4758-a00a-aa901e517483

 

I now also deinstalled and reinstalled the browser extension. Consistently reproducible on the Community Forum site.

pamperer562580892423 avatar Nov 18 '25 15:11 pamperer562580892423

I just tested again (Linux, Chrome 142.0.7444.175, Bitwarden 2025.11.0) and I can't reproduce this anymore. I also tried making an account in community.bitwarden.com, enabling 2FA, and I also don't get the "Update exiting login" when logging in. Whatever it was, it's gone (I think). And this w/o any updates to Chrome or Bitwarden since I reported above. Very weird..

reinob avatar Nov 18 '25 16:11 reinob

Thank you all for your feedback and follow up.

While I have not been able to reproduce this behavior, I am reopening this issue and I have flagged this to our Engineering team for further review.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

rmcdowell-bitwarden avatar Nov 19 '25 01:11 rmcdowell-bitwarden

Thanks @rmcdowell-bitwarden! I just did another round of testing:

At the moment, I can reproduce it on Vivaldi, Edge, Chrome and Brave. And there, it's exactly the behaviour as in my video.

On Firefox, it is slightly different (maybe because it is still on 2025.10.0?!): here, I don't see the "Update" popup after entering username and password, but only the "Save login" popup after entering the TOTP code. (and that last part is again the same as it happens in my video)

So, whatever this is - I can see it now in five different browsers / browser extensions.

But I'm not sure I can say anything more than that now.

PS: OP (@Dievale) and me are on Windows... maybe it only / mostly happens on Windows... ?! - I don't know...

@bonzospb66 and @GarlicCookie are also on Windows... @reinob In a previous post you wrote about Windows and Linux - as you wrote that it seems to be gone for now you only mentioned Linux. Can you check again if you experience it still on Windows?

All other posts unfortunately don't contain any information about the used OS. Whoever posts again or "new", please add your system details.

pamperer562580892423 avatar Nov 19 '25 01:11 pamperer562580892423

Ditto for me,

  • Windows 11 25H2 (OS Build 26200.7171)
  • Chrome Version 142.0.7444.135 and 142.0.7444.176
  • Chrome extension Version: 2025.11.0 SDK: ‘main (8ef7951)’ Server version: 2025.11.0

Happens when logging into https://community.bitwarden.com/ with username+password+TOTP, but not when logging in with passkey.

The popup below does not appears after username/password is filled in; it happens on the second page when the TOTP is entered.

It also does not happen when “notifications >> ask to add login” is unchecked.

Image

denbesten avatar Nov 19 '25 04:11 denbesten

Hi there,

I attempted to reproduce your issue and was unable to do so. I would recommend performing a clean reinstallation of your Bitwarden browser extension using the steps below.

  • Uninstall the Bitwarden browser extension
  • Restart the device (perform a full power cycle, shutting the device down completely and then restarting it)
  • Reinstall Bitwarden from the download link below

Bitwarden Downloads: https://bitwarden.com/download

We use GitHub issues as a place to track bugs and other development related issues. If your issue persists, please write us back using our “Contact support” form located on our Help Center (https://bitwarden.com/help/).

You can include a link to this issue in the message content.

Alternatively, you can also search for an answer in our help documentation or get help from other Bitwarden users on our community forums (https://community.bitwarden.com/c/support/).

The issue here will be closed.

Thanks!

Judging by the community forum thread I created, this seems to be happening to a decent number of users.

It happens to me on three different computers (one of which was a new installation a few hours ago). Two macOS computers both running macOS 26.2 and a Windows 11 computer. I only use Chrome so that is the only browser I've noticed it in.

It has asked for updates on internal sites as well as bankofamerica.com, fidelity.com, americanexpress.com, community.bitwarden.com, ups.com/upsmychoice, and quite a few more.

Initially, I thought this was a bug that might have been triggered by a Chrome update. However, I now think this may be a Bitwarden issue.

ericnixmd avatar Nov 19 '25 05:11 ericnixmd

I have also been experiencing this issue in Edge on Windows for the last 4-5 days. The issue only occurs when logging into sites where I have multiple saved credentials for different subdomains of the same domain (e.g. one.domain.com and two.domain.com). When I log in to either site, it prompts me to update the details even though I haven't changed them.

tomd1326 avatar Nov 19 '25 08:11 tomd1326

Same issue

Ninu-Nightwatch avatar Nov 19 '25 09:11 Ninu-Nightwatch

[..] @reinob In a previous post you wrote about Windows and Linux - as you wrote that it seems to be gone for now you only mentioned Linux. Can you check again if you experience it still on Windows?

All other posts unfortunately don't contain any information about the used OS. Whoever posts again or "new", please add your system details.

I have to correct myself and apologize for having reported that it was working OK again. I had deactivated the "ask to update existing login" notification, which obviously worked around the issue (I have face palmed myself sufficiently already..)

So yes, the issue is still there and very much alive and annoying. This is with Chrome (latest stable version) in both Linux and Windows.

For reference, I've experienced this issue on:

hxxps://bancaonline.bankinter.com hxxps://www.bancosantander.es hxxps://www.sparda-m.de

All are banks. No 2FA/TOTP/etc. involved when just logging in. Just in case, in all of them I have multiple accounts in Bitwarden, in case the issue may be related to logging in with account #1 and Bitwarden thinks it needs to update account #2. (Just guessing, and have no intention of experimenting).

reinob avatar Nov 19 '25 09:11 reinob

Thanks @rmcdowell-bitwarden! I just did another round of testing:

At the moment, I can reproduce it on Vivaldi, Edge, Chrome and Brave. And there, it's exactly the behaviour as in my video.

On Firefox, it is slightly different (maybe because it is still on 2025.10.0?!): here, I don't see the "Update" popup after entering username and password, but only the "Save login" popup after entering the TOTP code. (and that last part is again the same as it happens in my video)

So, whatever this is - I can see it now in five different browsers / browser extensions.

But I'm not sure I can say anything more than that now.

PS: OP (@Dievale) and me are on Windows... maybe it only / mostly happens on Windows... ?! - I don't know...

@bonzospb66 and @GarlicCookie are also on Windows... @reinob In a previous post you wrote about Windows and Linux - as you wrote that it seems to be gone for now you only mentioned Linux. Can you check again if you experience it still on Windows?

All other posts unfortunately don't contain any information about the used OS. Whoever posts again or "new", please add your system details.

I didn't experience it in 2025.10.0. One of my Macs wasn't experiencing it. I noticed the one that was had upgraded to 2025.11.0. I upgraded the Mac to 2025.11.0 and it started experiencing it. In my previous post I mentioned this is occurring on three computers. I just got a new MacBook Air and it is experiencing it as well (fresh new installation). Given the number of computers as well as the fresh installation experiencing it, I don't think reinstalling the Chrome extension is going to do anything except create a pain in logging in with master password, biometric 2FA, etc. This seems to be a bug introduced with 2025.11.0.

ericnixmd avatar Nov 19 '25 12:11 ericnixmd

Ah, I just saw that extension 2025.11.0 arrived in the Mozilla store. - I just tested it and now I also see the "Update existing login" popup after entering username and password, and not only the "Save (new) login" popup for TOTP.

So, with 2025.11.0 it's now for me the exact same thing on Brave, Chrome, Vivaldi, Edge and Firefox. (like it happens in my video)

BTW, as can be seen in my video, I have two login items for the Community Forum - the second one only stores a 2FA-"passkey" for the Forum, which I only created because you can't store two passkeys in one login item.

I don't know if it makes a difference if I only had one login item for this bug to appear. (and while I write this... maybe I'll test this later and report back on that)

UPDATE: I now reduced it to one login item (for the Community Forum), but it doesn't make a difference for me. Still the same behaviour as shown in my video - for all five browsers now with extension 2025.11.0 (i.e. with first the "Update existing login" popup for username/password and then the "Save login" popup for the TOTP code appearing)

pamperer562580892423 avatar Nov 19 '25 14:11 pamperer562580892423

I just updated the extension to 2025.11.0 in Firefox (145.0.1, Linux) and the issue appeared also there. I'm attaching a (slightly edited — it's sensitive data) a screenshot of the Bitwarden pop-up, to also show how bad the formatting/layout is. I have no idea (yet?) what the difference may be in the websites where this buggy behaviour appears vs websites where this doesn't happen. So far it's on-line banking sites.

I just tested a few random accounts, and it also happened at https://myibm.ibm.com, when logging in to https://quantum-computing.ibm.com/composer/. This is a two-step login, but without TOTP.

Image

reinob avatar Nov 19 '25 19:11 reinob

Just adding that I am seeing the same issue as well.

JUGGStheOG avatar Nov 19 '25 21:11 JUGGStheOG

Maybe not important, but adding the domain to the Excluded domains suppresses the Update/Save popups still successfully in another test I just did. (Whoever does this as a temporary mitigation: just be aware that you also can't use passkeys from your Bitwarden vault on those domains then.)

[PS after @ericnixmd's post: I only tested it again on the Community Forum site where adding it to the excluded domains worked -- of course, even that may also be part of that bug, that it doesn't work on other sites to have it on the "excluded domains".]

And when testing on the Community Forum gets boring: in the meantime some other sites where it seems to happen were posted in the corresponding Community Forum thread.

pamperer562580892423 avatar Nov 19 '25 21:11 pamperer562580892423

Maybe not important, but adding the domain to the Excluded domains suppresses the Update/Save popups still successfully in another test I just did. (Whoever does this as a temporary mitigation: just be aware that you also can't use passkeys from your Bitwarden vault on those domains then.)

And when testing on the Community Forum gets boring: in the meantime some other sites where it seems to happen were posted in the corresponding Community Forum thread.

This doesn't always work. I already had many of the subject domains in the exclusion list and still got the popup. I deleted and added them back and it still happens.

ericnixmd avatar Nov 19 '25 21:11 ericnixmd

I am having this exact problem too so following the conversation in hope of a solution. For me, it seems to have started following a recent update by Bitwarden (I'm using 2025.11.1). Also, it consistently occurs when logging in to a bank.

mwires avatar Nov 20 '25 00:11 mwires

Same issue here, with MANY sites (USAA.com, TSP.gov, etc). Absolutely no change to the login or password information.

I have tried the exclusion list option as well as adjusting the URL matching options, no joy.

ColoradoFlyer avatar Nov 20 '25 06:11 ColoradoFlyer