mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-02-05 00:29:40 +03:00
Error after changing Bitwarden_rs master password and encryption #869
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Simmelinus on GitHub (Nov 27, 2020).
Error after changing Bitwarden_rs master password and encryption
Hi,
today I changed the master password of my Bitwarden_rs and I also checked the box to change the encryption.
As Bitwarden_rs announced before I was logged off after that of course. But beside the note that I was logged off, there were two red error boxes under the log out message on the upper right side of my screen as well. Both just said that an error occured. Just one sentence. No error code or additional information. Is this OK and part of the routine or not?
I tried to log in with the new master password and everything works fine as it was before. But still I am a little bit concerned that maybe something with the encryption is not right and that there could be a security issue with my password encryption. Could this be the case and how can I find out?
My environment:
My Bitwarden_rs installation runs on a Raspberry Pi 3 B in a Docker container (installed via image that I got from Docker) and with a traefik reverse proxy.
My Bitwarden_rs version is 1.17.0.
I use Bitwarden_rs with the Andoid App as well as the Chrome extension. But when the error occured I was logged in via my DDNS domain on Chrome.
I reproduced the change of the master password one more time (again with the checked box for the encryption) and the two erros again occured.
In summary I need to know if these errors are normal or not - and if not: What could be the reason and what needs to be done to make sure that my password are safe and ecrypted.
Thank you!
@BlackDex commented on GitHub (Nov 28, 2020):
@Simmelinus, i just checked it, and this should not happen i think. But i can reproduce it.
Using vault.bitwarden.com this doesn't happen, so there probably is an issue on our side.
@BlackDex commented on GitHub (Nov 28, 2020):
Thanks for reporting, i have fixed this in a PR.
@Simmelinus commented on GitHub (Nov 28, 2020):
@BlackDex Thanks a lot for your quick reaction! Was this issue security-related and is it necessary to change my passwords that I store in Bitwarden_rs or is everything safe?
@BlackDex commented on GitHub (Nov 28, 2020):
Well basically yes, but it was a more strict security which caused this :). So no issues. I only think that you maybe indeed should do a rotate again using the new version when the PR is merged. Because the new changed rotated keys arn't used/saved correctly now.
@Simmelinus commented on GitHub (Nov 28, 2020):
Alright, great. Thank you!