bitwarden / clients

Bitwarden client apps (web, browser extension, desktop, and cli).
https://bitwarden.com
Other
9.29k stars 1.25k forks source link

TOTP Password can't be copied from protected Credentials but seen (Chrome Extension) #4616

Open chraebsli opened 1 year ago

chraebsli commented 1 year ago

Steps To Reproduce

  1. Create a new Credential with a TOTP Code
  2. Enable the Master Password Protected Option
  3. Save the Credential
  4. In the Chrome extension, open the Credential in view mode (without entering a password)

Expected Result

The TOTP Code either can't be seen and copied without entering the master password OR the TOTP Code can be seen and copied without the master password

Actual Result

You can see the TOTP Code and the remaining time but if you want to copy it, you have to enter the master password

Screenshots or Videos

The TOTP Code can be seen on protected credentials totp can be seen

To copy the TOTP code, you need to enter the master password totp needs master password to be copied

Additional Context

It doesn't make sense if the code is protected to copy if you can see it. The only 2 possibilities that make sense are:

  1. TOTP Code can't be seen nor copied without master password
  2. TOTP Code can be seen and copied without the master password

This is also an issue in the Android app. Issue Link

Operating System

Windows

Operating System Version

Windows 10 pro 21H1

Web Browser

Brave

Browser Version

1.47.186

Build Version

2023.1.0

Issue Tracking Info

Krychaz commented 1 year ago

Hello there,

Thank you for your report! We are able to reproduce this issue, if you wish to add any information/screenshot/recording or so, please do it here and our engineering team will review it.

Thanks!

chraebsli commented 1 year ago

@Krychaz do you have any update to this issue?