bitwarden / mobile

Retired Bitwarden mobile app for iOS and Android (MAUI/Xamarin).
https://bitwarden.com
GNU General Public License v3.0
149 stars 24 forks source link

TOTP Password can't be copied from protected Credentials but seen #2336

Open mWya2uillctVDdkUnWLaBXVFku9Ks4QTH8ubguA opened 1 year ago

mWya2uillctVDdkUnWLaBXVFku9Ks4QTH8ubguA commented 1 year ago

Steps To Reproduce

  1. Create a new Credential with a TOTP Code
  2. Enable the Master Password Protected Option
  3. Save the Credential
  4. In the App, open the Credential in view mode (without entering a password)

Expected Result

The TOTP Code either can't be seen and copied without entering the master password OR the TOTP Code can be seen and copied without the master password

Actual Result

You can see the TOTP Code and the remaining time but if you want to copy it, you have to enter the master password

Screenshots or Videos

The TOTP Code can be seen on protected credentials totp can be seen

To copy the TOTP code, you need to enter the master password totp needs password to copy

Additional Context

It doesn't make sense if the code is protected to copy if you can see it. The only 2 possibilities that make sense are:

  1. TOTP Code can't be seen nor copied without master password
  2. TOTP Code can be seen and copied without the master password

This is also an issue in the chrome extention. Issue Link

Operating System

Android

Operating System Version

Android 12

Device

Oneplus 10 Pro

Build Version

2023.1.0 (5786)

Beta

jonnykl commented 1 month ago

Additionally to problem described in this issue, the TOTP code of protected credentials can be viewed and copied on the "Verification codes" screen where the TOTP codes of all credentials are listed.