Login with TOTP vs Passkey
-
I saw there are repeatedly passkey issues, which could not be recreated. I also stumbled upon this recently together with a client. Seems like when you setup userid / password with TOTP and add passkey later, login procedure gets confused:
- logged in with userid / password, jumped to TOTP entry mask,
- passkey popup also appears, cancelled by user interaction
- login doesn't proceed successfully
- also when using at the moment the popup appears, login fails.
Choosing "login with a passkey" works fine, but the "old way" to login with userid / pw and TOTP is broken once the passkey is set.
When disabling TOTP for the user, the login trouble is gone. But now its the only way into the account.
Shouldn't both work in parallel? Passkey AND UserID + PW + TOTP?
-
Hello @dsp76
I have just tested this flow.User with TOTP and passkey configured.
Attempt login with username and password:
- opens the passkey context of bitwarden and shows only the passkey for this user
- clicking the passkey
- login success
Attempt login with username and password:
- opens the passkey context of bitwarden
- closing the bitwarden context without selecting the passkey, falls back to device passkey cancel that as well
- UI prints
Failed to login with passkey, now I can input a TOTP - enter TOTP and pressing
Login - login success
Attempt login with passkey:
- bitwarden context opens showing all passkeys available for this domain
- selecting my passkey for the user
- login success
Does this flow not work with 1password?
Or do you think the flow should be changed so that if multiple 2FA options are configured for a user, the UI asks the user which one to use?
Similar to our NodeBB forum when having TOTP and Passkey configured?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login