Biometrics Not Working On Firefox

[GrouchyM]

Steps To Reproduce

1. Click Bitwarden extension in Firefox browser
2. Watch as nothing happens with biometrics, spins and then fails

Expected Result

That my password manager acts like all other password managers and opens with biometrics.

Actual Result

Spins, fails, doesn't unlock.

Screenshots or Videos

No response

Additional Context

No response

Operating System

macOS

Operating System Version

No response

Web Browser

Firefox

Browser Version

No response

Build Version

2023.7.1

Issue Tracking Info

• [X] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

[buzzwebly]

I'm having an issue too, I think it may be because Desktop has updated to 2023.8.2 but Firefox extension is still at 2023.7.1 I seem to recall reading the changes in 2023.8.2 require the extension to be at the same release level. It's been released, but for some reason Firefox site is not updated yet and is still offering 2023.7.1 extension on download.

[cbbit]

Hi there,

Thank you for this report.

We have made some changes to the way that biometrics work in this release. Please wait until both your desktop app and your client apps are updated to 2023.8.2 - this will restore biometric functionality.

In the meantime, please unlock your client apps using the master password or PIN.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

We apologize for the inconvenience, and thanks once again!

[Sunsper]

I hope Mozilla will update the extension in their store soon, because this sucks a bit.

[7h3Cub3]

Had the same issue at computer restart this morning and found that post, found a way to fix it in the meantime, download from BW github the Browser v2023.8.2 file corresponding to your browser, in my case "dist-firefox-2023.8.2.zip" for firefox, rename the zip as xpi (dist-firefox-2023.8.2.xpi), then go into your extension page, and select "install from a file", you can then install the newer 2023.8.2 browser extension and biometric work again, you will get a security prompt because the addon not coming from the firefox store. In the meantime it works !

PS : would be a great move from the devs to insure the newer extension is released on all browsers stores before they update the client, or put a warning (like browser extension and desktop client version mismatch, something), or publish the xpi's (or chrome equivalent) themselves, you can partner with them to make them signed like if they were coming from the store.

Cheers.

[buzzwebly]

That doesn't work for me, I believe it only works if you're running the developer version or one of the nightly builds, where it's expected that you may be running unsigned code. I'm not running dev or nightly, so I'll just wait.

[gerard-mccann2]

This issue definitely sucks ... sorry for being negative but it is a big enough bummer to my PC workflow that I felt I had to say so. My master password is ridiculous so having to type it each time I fire up Firefox following a system reboot is painful. This is the only workaround I can find unless I want to change to a different browser or drop my password/config security, which I don't.

Really appreciate this being fixed sooner than later. Thanks

[brian-kneebone]

It would be nice if the browser extension let you optionally type in the master password without disabling browser integration in the desktop app. If I was just a Firefox user that's fine, but it breaks my other browser integrations. I briefly see this prompt, but it disappears to quickly. For what it's worth, I removed the extension from Firefox and re-added and the store is still showing only version 2023.7.1. Looking forward to this getting fixed.

[iamironz]

I have pretty much the same issue: after attempting to unlock with my fingerprint (I see a macOS system prompt and then touch the fingerprint sensor) the progress bar just keeps spinning but nothing happens. Works just fine on Safari.

[artpoli]

I had to switch the biometric unlock off because it stopped working completely. While there are no any issues with biometrics in Chrome, I'm experiencing biometrics issues in Firefox for a long time. Establishing a new browser integration didn't help.

[3Domse3]

@cbbit I can't even log in using the master password or any method at all. I already tried removing the addon and reinstalling it, now I can't set up my account and it only says the account doesn't exist or the password is wrong (it isn't)... :(

[goose-ws]

Are there builds of the updated browser extension I can manually install until the new version is available through Mozilla? I have a really long password that is very obnoxious to type.

[pgm83]

I've found if i restart desktop app, then biometrics works again for the extension (2023.7.1) so that's been my workflow for the last few days

[biglu91]

Same issue. Workaround that works for me is downgrading desktop app to version 2023.7.1

[timothyleerussell]

This is a bit painful (as already expressed by others).

Also, if you have the browser plugin set to auto ask for verification on launch, there doesn't appear to be a way to enter your password as it auto pops the windows hello dialog when you click on the extension icon. You can authenticate or cancel, it doesn't matter to the extension, which is not receiving the data.

To login (by providing the master password), I had to remove and reinstall the Firefox extension.

[goose-ws]

Same issue. Workaround that works for me is downgrading desktop app to version 2023.7.1

This workaround solved it for me, until the browser extension can be updated.

Quick link for others wanting to roll the desktop client back to 2023.7.1: https://github.com/bitwarden/clients/releases/tag/desktop-v2023.7.1

[GrouchyM]

At this point, I don't even think this is Bitwarden's problem anymore. Every browser I've tried has the updated extension EXCEPT Firefox. I believe this is Mozilla dragging their feet, not Bitwarden.

[biglu91]

Same issue. Workaround that works for me is downgrading desktop app to version 2023.7.1

This workaround solved it for me, until the browser extension can be updated.

Quick link for others wanting to roll the desktop client back to 2023.7.1: https://github.com/bitwarden/clients/releases/tag/desktop-v2023.7.1

Yeah but beware on restarting the desktop app: it will update automatically. Fortunately downgrading doesn't require uninstalling the newer version and settings changed are not reset.

[gerard-mccann2]

I got fed up with waiting for a resolution and based on what other posters said, have moved to Brave browser. It's on version 2023.8.2 which works perfectly with biometrics.

Wish this had never happened, but the silver lining is I get over to a browser that seems to be taking over from Firefox privacy-wise anyways...

Whether the issue root cause is Bitwarden or Firefox, hopefully with Brave there will be no repeat issues going forward. Cheers to all other posters for their suggestions/workarounds. I think moving browser is the best option for me from all those possibilities.

[GrouchyM]

I got fed up with waiting for a resolution and based on what other posters said, have moved to Brave browser. It's on version 2023.8.2 which works perfectly with biometrics.

Wish this had never happened, but the silver lining is I get over to a browser that seems to be taking over from Firefox privacy-wise anyways...

Whether the issue root cause is Bitwarden or Firefox, hopefully with Brave there will be no repeat issues going forward. Cheers to all other posters for their suggestions/workarounds. I think moving browser is the best option for me from all those possibilities.

I did the same as you yesterday. I turned all the crypto crap off and Brave has been great! I've had enough of Firefox at this point.

[fromorbonia]

Just adding to the bug data here, I'm on Windows 10, the popup on Firefox for the biometric check comes up. It recognises my fingerprint, closes the pop up. However, Bitwarden remains locked on the browser window. Chrome working no problem. Looking forward to fix :-). This only started when I upgraded to 2023.8.2, and problem remains with 2023.8.3 Thanks

[cili7]

This was fixed for about a day... now the problem has come back again. Firefox biometrics not working with Bitwarden addon. Registers the fingerprint, but Bitwarden remains locked. "Windows Hello" biometrics works for everything else on the system- including the standalone Bitwarden app. Firefox addon remains broken :(.

Also, there's no way to select a different sign in option in the Bitwarden addon. Once you've set it for biometrics, and for whatever reason biometrics fails, the only way to change how you log in is to completely remove the addon from Firefox and reinstall.

This is becoming a very frustrating experience.

[sgloutnikov]

@cili7 you can log in with the master password and enable PIN login until the FireFox addon gets updated in the addon store.

[serin113]

See this comment on #2258 for the temporary fix:

(open the Registry Editor, then in HKEY_CURRENT_USER\Software\Mozilla\NativeMessagingHosts\ create a new key):

key: com.8bit.bitwarden value: C:\Users\ \<username> \AppData\Roaming\Bitwarden\browsers\firefox.json

replace <username> with the user folder

This issue has been confirmed by a member of the team on #5952.

[Skaewlkr]

I tested all the suggested fixes but the problem still remains. I unlock the Extension via biometrics and I get the "waiting for confirmation from dekstop" message.

Yesterday I discovered something interesting that maybe could be helpful finding the problem. I tested different settings within the desktop app and found out that if the desktop app is unlocked, the biometrics in my browser extension work. This works fine until the timeout is reached and the desktop app locks again.

In addition, this only works if I unlock the desktop app with my master password. If I unlock it with biometrics or a pin, the extension won't accept the biometrics and I get the mentioned message.

I could now set the timeout for the desktop app to "restart" or "never" but what would be the point of using biometrics in the browser extension at all if the desktop app is unlocked all the time? In this case I could also just set the timer for the browser extension to never and just keep the exntesion unlocked all the time without the need of using the desktop app.

At the moment, I see no benefit in using biometrics within my extension, if I have to keep my desktop app unlokced all the time for it to work.

I hope this information can somehow be helpful to find a solution for the problem...

[aimuz]

I have the same problem with librewolf (Firefox-based) browser on macOS

[aimuz]

When I install this plugin manually, he is able to work correctly https://github.com/bitwarden/clients/releases/tag/browser-v2023.8.3

[cili7]

I gave up on waiting. Uninstalled Firefox and went for Brave instead. Just disable all the crypto crap and its actually a very fast, secure, and private browser. Also imports all your bookmarks accurately as well. Works perfectly with Bitwarden as is, along with other sites that Firefox seems to have trouble with (like CBA in AU for instance). Bye bye Firefox, it was nice while it lasted.

[4x0v7]

Same issue here with Waterfox, extension stuck on 2023.7.1. Can confirm that installing dist-firefox-2023.8.3.zip manually by dragging and dropping onto Add-ons Manager fixes the issue

[buzzwebly]

The extension works, the real question is why has it not been updated yet on the Firefox add-ons site when it's been updated everywhere else? Is it a Bitwarden submission delay or a Firefox approval delay? I don't know what the add-ons update process is..

[Tipoff4317]

@buzzwebly @blxckbxrd

I don't know the add-ons update process is. My observation of BW Firefox extension is, once it drops on Github, it takes approximately a week to become available in the Firefox store, unless it isn't, which normally will be followed by another BW browser update. This is what happened this time, 8.2 on Aug 26, then 8.3 on Sept 6. Compare this with 7.1 which dropped on July 13, and became available on July 18.

Nobody has elucidated this process yet, but there was a Firefox extension developer who said his extension usually became available immediately, but it was unclear if his was a "Recommended Extension" like BW or not.

The general assumption people have had was, there is an extra validation time between BW-Firefox, which is why the availability always lags.

Since you both are on Github and you may be able to keep focused attention on BW releases, you may want to consider doing updates manually. Monthly/Bi-monthly updates sometimes have hickups like this, and delaying the updates may smooth things over by not immediately updating if there is a significant hickup. Also, some people delays updates in hope of not getting caught in supply-chain attacks. This is a trade-off with not getting immediate updates for 0-day attacks. In the past, BW had released at least one update, which later turned out to incorporate a fix for a vulnerability later published by a 3rd-party, all without saying anything themselves about it at release and post release.

[Moonstone3010]

The Firefox extension has finally been updated. However, note here says that the last update was on 7.09.2023 O_o

[3Domse3]

It's working for me again too. Can log in to my account after reinstalling and forcing the installation of the current version by that :)

[fromorbonia]

Works for me too! :-) - in settings is says version = 2023.8.3, with last updated 13 Sep 2023. Foolishly I didn't take a note of the previous Firefox version, but long pipeline for Firefox makes sense.

[timothyleerussell]

This issue appears to have been resolved by Mozilla publishing the extension.

[Sunsper]

Yeah, Mozilla finally updated the extension in their Add-ons Store. Please close this issue.