-
Notifications
You must be signed in to change notification settings - Fork 896
Open
Labels
Description
Steps To Reproduce
- Have an existing BW client logged in
- Begin new device login from Android app
- Enter email address with arbitrary capitalisation (eg autocomplete capitalising first letter)
- Choose Log in with device
- Note fingerprint phrase mismatch between devices
Expected Result
Login attempt either fails to recognise account, or completes successfully with matching fingerprint.
Actual Result
Existing device receives an auth prompt with mismatched fingerprint phrase.
Screenshots or Videos
No response
Additional Context
The desktop apps convert email to lowercase before generating fingerprint in desktop auth-request.service.ts:224.
The Android app does not, see Android AuthRequestManagerImpl.kt:472 and Android AuthSdkSourceImpl.kt:45.
From what I can see in the iOS codebase it also seems to use the provided email without lowercasing it, see iOS AuthService.swift:832
Build Version
2025.8.1 (20670)
What server are you connecting to?
US
Self-host Server Version
No response
Environment Details
No response
Issue Tracking Info
- I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.