Missing API endpoint verify-password #810

New Issue

OVERLORD · 2026-02-04T22:46:31+03:00

OVERLORD commented

2026-02-04 22:46:31 +03:00

Originally created by @BlackDex on GitHub (Sep 25, 2020).

Missing API endpoint verify-password

First reported here: https://bitwardenrs.discourse.group/t/safari-plugin-calling-api-accounts-verify-password/319

It could happen that the stored password hash from a client (mobile, desktop, browser-extension) is lost or cleaned.
When this happens, and your vault is locked, it will try to send a request /api/verify-password which bitwarden_rs does not have.
Because of this you can't unlock the vault. You need to "Log Out" and "Log In" again to access the vault.

Your environment

Bitwarden_rs version: 1.16.3-2f3e18ca
Install method: docker
Clients used: Firefox Extension
Reverse proxy and version: nginx
Version of mysql/postgresql: sqlite3

Steps to reproduce

Start Firefox
Open the extension in a separate window by clicking on the Pop Out icon in the top left.
In the main browser URL Bar type about:debugging and press enter
On the left click on This Firefox
Scroll until you see the Bitwarden - Free Password Manager and click on inspect
Go to the storage tab and select Extension Storage
Filter for hash, and there should appear one entry.
Make sure you lock the vault in the Pop Out window.
Delete the hashKey entry
Try to unlock the vault

The last action will trigger the request.

Expected behaviour

Vault unlocks.

Actual behaviour

An error occurs and i need to log out, and back in again.

Relevant logs

[2020-09-25 15:48:46.041][request][INFO] POST /api/accounts/verify-password
[2020-09-25 15:48:46.041][response][INFO] 404 Not Found

Originally created by @BlackDex on GitHub (Sep 25, 2020). ### Missing API endpoint verify-password First reported here: https://bitwardenrs.discourse.group/t/safari-plugin-calling-api-accounts-verify-password/319 It could happen that the stored password hash from a client (mobile, desktop, browser-extension) is lost or cleaned. When this happens, and your vault is locked, it will try to send a request /api/verify-password which bitwarden_rs does not have. Because of this you can't unlock the vault. You need to "Log Out" and "Log In" again to access the vault. ### Your environment * Bitwarden_rs version: 1.16.3-2f3e18ca * Install method: docker * Clients used: Firefox Extension * Reverse proxy and version: nginx * Version of mysql/postgresql: sqlite3 ### Steps to reproduce 1. Start Firefox 2. Open the extension in a separate window by clicking on the **Pop Out** icon in the top left. 3. In the main browser URL Bar type `about:debugging` and press enter 4. On the left click on **This Firefox** 5. Scroll until you see the **Bitwarden - Free Password Manager** and click on `inspect` 6. Go to the `storage` tab and select `Extension Storage` 7. Filter for hash, and there should appear one entry. 8. Make sure you lock the vault in the Pop Out window. 9. Delete the `hashKey` entry 10. Try to unlock the vault The last action will trigger the request. ### Expected behaviour Vault unlocks. ### Actual behaviour An error occurs and i need to log out, and back in again. ### Relevant logs ```logs [2020-09-25 15:48:46.041][request][INFO] POST /api/accounts/verify-password [2020-09-25 15:48:46.041][response][INFO] 404 Not Found ```

OVERLORD closed this issue

2026-02-04 22:46:37 +03:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#810