Webauthn 2FA not working in Android app

[GuidoCHLM]

Steps To Reproduce

1. Provide Master Password and Login
2. For 2FA select webauthn
3. Choose NFC device to get key (Yubikey 5C in my case)
4. Place the NFC key on the back on the phone
5. Continue to auth 2FA
6. You get an error "An error has occurred"

Bitwarden: 2025.3.0
Android 14
Device Oneplus 9 Pro

Same Yubikey works perfectly fine for 2FA webauthn on Windows client

Expected Result

Webauthn 2FA working on Android device

Actual Result

Webauthn 2FA not working on latest Android client

Screenshots or Videos

No response

Additional Context

No response

Build Version

2025.3.0

What server are you connecting to?

US

Self-host Server Version

No response

Environment Details

No response

Issue Tracking Info

• I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

[S-Kakar]

Thank you for your report! We've added this to our internal board for review.
ID: PM-20049

[GuidoCHLM]

Thank you, in case of any help to track the error Chrome version is 135.0.7049.38

[abergs]

I'll take a look. Did it work on the previous version of the android app for you?

[GuidoCHLM]

Hey, thanks for looking into this.

No, it didn't work with previous version either. I even tried installing ver 2024.10 using the apk and that one didn't work neither.

[tinfever]

I've been having the same issue for at least several weeks.

Steps to reproduce:

1. Enter Master Password and click "Log in with master passsword"
2. Authenticate WebAuthn window appears. Click "Launch WebAuthn"
3. Vault.bitwarden.com FIDO2 WebAuthn page opens in browser. Click button for "Authenticate WebAuthn"
4. Nothing happens but now the button that used to say "Authenticate WebAuthn" says "Return to app".
5. Click "Return to app"
6. Sometimes it takes me back to step 2 with no error. Sometimes it says "An error has occurred. We were unable to process your request. Please try again or contact us."

Pixel 7 Pro
GrapheneOS
Bitwarden App Version: 2025.3.0
Android 15

[abergs]

@GuidoCHLM @tinfever Thanks for your participation in this. I could repro this on Android 14 yesterday, but after allowing over night automatic updates (especially on chrome), the flow works without a hitch.

I'm on Chrome 135.0.7049.79. Running an older chrome, e.g. 122 does still produce a similar error to what you are reporting.

[GuidoCHLM]

Hi @abergs ,

I updated to Chrome 135.0.7049.79, but still seeing the issue. Will keep an eye on it.

I additionally tried authenticating directly from phone's Chrome (135.0.7049.79) and it also failed. Still with a slightly different error:

[Ryan0188]

I was also having this issue. I needed to update either or both "Security update" and Google Play system update" via Security and privacy>Updates. Bitwarden also needs to be on in General management>Passwords, passkeys and autofill. After entering my master password I now get the passkey pop up where I can touch More saved sign-ins>Show QR code>NFC security key.

Galaxy S21 5G
One UI 6.1
Android 14
Google Play system update 1 March 2025
Android security patch level 1 February 2025
Chrome 135.0.7049.79
Bitwarden App Version: 2025.3.0

[tinfever]

@abergs Thank you! I installed Chrome (135.0.7049.79), set it as my default browser, and was able to get my Yubikey to work for 2FA.

[matt8833]

Same issue for me with a S23 Ultra. Chrome/Google Play was already up-to-date. What worked was the Chrome/Bitwarden autofill setting as noted above. But now, each time, I need to select the QR code option first (for some reason) before I get offered the NFC/USB key prompt as previous. Definitely seems like something changed in Android/Chrome that Bitwarden needs to adapt to.

[kimdre]

I also have this issue with the latest version.
OnePlus 12 with Android 15
WebAuthn neither works with Chrome, nor with Brave Browser.
I'm completely locked out of my Bitwarden account on my phone right now. Please fix this ASAP.

[Agenda5347]

Same problem here. Using bitwarden and yubikey on Pixel 6a. Tried updating the pixel's security updates and google play store but still getting the error. Am able to get in using my authenticator app as a backup for now but trying to use webauthn with the yubikey fails through webauthn. FYI I am using firefox focus browser as default.

[gstegm]

I also have this issue. WebAuthn does work with device biometrics but not with the Yubikey.
OnePlus 9 Pro
Android 14
Chrome 137.0.7151.72 (default browser)
Bitwarden 2025.5.0

The error message I get is "An error has occurred. NotAllowedError: The operation either timed out or was not allowed. See: https://www.w3.org/TR/webauthn-2/#sctn-privacy-considerations-client"