bitwarden / help

The help website/knowledgebase (bitwarden.com/help).
https://bitwarden.com/help/
132 stars 88 forks source link

Add note about re-adding NFC keys to WebAuthn article #843

Open dominicjaeger opened 2 years ago

dominicjaeger commented 2 years ago

Problem: I've been trying to log in the Android app with SecurityKey NFC for the first time. To do so, I clicked through the dialogs until I got the prompt to (translated) "hold my key to the back of the device until it doesn't vibrate any more".

The same behavior occured in vault.bitwarden.com in Android mobile browser and in the Android app (with the same Chrome browser). Chrome on Android Version 96.0.4664.104 Redmi Note 9 Pro MIUI Global 12.5.6 Android 11 RKQ1.200826.002

Solution: Removing and adding again the NFC key in the web vault on a computer solved the problem! Even though I still saw the "No supported application" error or "NFC read error" when using the NFC key on my phone, the vault always opened.

I can try to reproduce this with my second key in a few days.

Possibly interesting:

Suggestion: Add a note about removing and adding migrated security keys in the NFC troubleshooting section in the article Two-step Login via FIDO2 WebAuthn

needs-coffee commented 2 years ago

hi @dominicjaeger

did you reproduce this with another key? Is this specifically an issue with the NFC key that is labled as (migrated from FIDO) or did you test this with another key as well?

If this is the case and is reproducible this could be added to the documentation but probably should be raised on the mobile app repo as well.

dominicjaeger commented 2 years ago

In my first post, both keys initially had the label "Von FIDO migriert" (migrated from FIDO) Security keys

Today, I could reproduce the behavior with my second key (which still has the "Von FIDO migriert"). I made screen recordings to show what exactly happens. Sometimes I get one or two sounds as response.

https://user-images.githubusercontent.com/37143059/148640549-6e1f1cb4-d0c1-48b8-8d78-7156ab88f5fd.mp4

With the default payment app set to undefined, the message "Two-step token is invalid" appeared on Chrome on Android when trying to access vault.bitwarden.com. I haven't noticed this before. It can be seen briefly in this video:

https://user-images.githubusercontent.com/37143059/148640535-30bbf445-3b61-4310-b1d3-64215bdd6ad1.mp4

I have not yet removed & added the second key yet. If there is nothing else to test, then I would do that as next step to check if it solves the problem again.