If you got the automatic updates on the bitwarden clients, they will show an empty vault if you are selfhosting vaultwarden.

It seems to be an accidental bug in the bitwarden clients that are assuming that they're talking with official servers

It's fixed with the latest release of the vaultwarden server that was published a few minutes ago

top 50 comments

sorted by: hot top controversial new old
[–] [S] 128 points 1 month ago (9 children)

Do not update any bitwarden client until you can update vaultwarden

  • source
  • hideshow 9 child comments
  • [–] 31 points 1 month ago

    If anyone's Firefox auto updated like mine you can uninstall the extension, go to the Bitwarden extension page on the Firefox website and manually install the old version. Only needed if you can't update vaultwarden right away.

  • source
  • parent
  • load more comments (8 replies)
    [–] 90 points 1 month ago* (2 children)

    I found this comment on what happened by dani-garcia, one of the main devs:

    The short version is that around 8-ish years ago, Bitwarden changed the way the vault items were structured, and Vaultwarden added some backwards compatibility fields to ensure both old and new versions of the clients worked.

    These backwards compatibility fields were supposed to be a temporary measure, but for at least the next three years the clients still required them, until we eventually forgot to keep track of them. At some point between 2021 and today, the clients stopped requiring these backwards compatibility fields, but Vaultwarden was still sending them.

    This wasn't a problem until Bitwarden decided to use the backwards compatibility fields in a completely different way, which caused the clients to crash.

    Found here: https://github.com/dani-garcia/vaultwarden/discussions/7473

  • source
  • hideshow 2 child comments
  • [+] 44 points 1 month ago* (last edited 1 month ago) (1 child)
  • [–] 12 points 1 month ago* (last edited 1 month ago)

    I hadn't heard of this one before, thanks for posting.

    Edit: this website is very strange. The article is dated 5th June 2019 and the other "case studies" are dated to look like they've been writing regularly since 2019 up until now. But the article reads like LLM output, and the waybackmachine has no record of this article before December 2025, and no record of the domain name henricodolfing.ch before April 2025. The whois database says that the domain was registered in January 2025. So are they really trying to launder slop by back-dating it to make it look like it was written before LLMs existed? Fuck.

  • source
  • parent
  • [–] 48 points 1 month ago (8 children)

    I do love docker + a front end like dockge.

    Saw this post, switched to my browser, clicked three buttons; vaultwarden is now updated. Didn't even move my lazy ass off the couch. (I'm on my phone)

    Thanks for the PSA! :)

  • source
  • hideshow 8 child comments
  • [–] 19 points 1 month ago (3 children)

    I love podman quadlets, I didn't do anything and it updated itself 😁

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 1 month ago (2 children)

    I run watchtower on a cron schedule. It had already fired for today, so it wouldn't have run again until tomorrow. I could have waited, but manual is just as easy.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 11 points 1 month ago* (2 children)

    I can recommend Arcane as a front end. I switched over all my services this last week from multiple dockges to a single arcane (+agents). It's looking pretty sweet now. Cleans up a lot of bookmarks too 😆

  • source
  • parent
  • hideshow 2 child comments
  • [–] 40 points 1 month ago (2 children)

    I've been leery about bitwarden client updates since the posts awhile back about the new(ish) PE/VC c suite person.

    I'm not saying those are related in any way other than the fact that I intentionally haven't updated my clients to the latest yet and for once it worked out for me :)

  • source
  • hideshow 2 child comments
  • [–] 40 points 1 month ago (2 children)

    Thanks so much for the PSA. I'm currently on vacation without any chance to update Vaultwarden but need access to it via the Bitwarden client. Just disabled the auto update in time. I wish I could vote this twice.

  • source
  • hideshow 2 child comments
  • Wow! Thanks for the PSA!

  • source
  • [–] 16 points 1 month ago (6 children)

    Ps. I notice your msn avatar. I'm busy with https://retromessenger.com/. Coming soon for free!

  • source
  • hideshow 6 child comments
  • [–] 8 points 1 month ago (3 children)

    Would love this to work with Signal and Matrix!

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 1 month ago (2 children)

    Yah that's possible. I just implemented telegram for now. But depending on the open api like matrix should work for sure as well. Has signal also an open client api?

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 3 points 1 month ago (1 child)

    Very nice, I even considered using escargot to patch the old clients but then realized it's not a great idea security wise

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 month ago

    Yeah escargot just doesn't do it for me. I want to keep using the existing chat network I use daily. But just giving back the MSN vibes.

    I created it using gtk4. So it's cross platform as well. Meaning Linux native. Which I also wanted.

  • source
  • parent
  • [–] 13 points 1 month ago

    Thank you for the PSA good friend!

  • source
  • [–] 10 points 1 month ago (8 children)

    Thanks, probably saved me a lot of headache on my laptop browsers. Fortunately, I don't use the official Bitwarden client on android partly because this seems to keep happening.

  • source
  • hideshow 8 child comments
  • load more comments (8 replies)
    [–] 8 points 1 month ago*

    Noticed that as well with our selfhosted instance at work and wondered what the deal was.
    Guess I now know why.

  • source
  • [–] 8 points 1 month ago (1 child)

    Was wondering why it suddenly was stuck loading, thanks!

  • source
  • hideshow 1 child comment
  • [–] 7 points 1 month ago

    Just did the update of vaultwarden. Had to log out and log back again in bitwarden on my browser. On the phone it seems to just have worked. Thank you for the PSA :)

  • source
  • [–] 5 points 1 month ago (2 children)

    Thank you for this. I thought I was going insane. Time to turn auto updates off

  • source
  • hideshow 2 child comments
  • [–] 19 points 1 month ago (1 child)

    Per the vault warden release notes:

    We strongly advice to update as soon as possible.

    With the vulnerabilities being patched these days, it seems ill asvised to disable automatic updates for something as critical as a password manager.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 month ago

    it seems ill asvised to disable automatic updates

    I use the WatchTower fork for now, but I use it with the run once flag:

     volumes:
          - /var/run/docker.sock:/var/run/docker.sock
        command: --run-once --cleanup
    

    So, when an update is available, I'll delay updating until I am rather comfortable that all the early adopters have worked out all the bugs for me. LOL Thanks guys! You're an invaluable service.

  • source
  • parent
  • [–] 4 points 1 month ago (2 children)

    The packaged Debian version did not get updated yet.

  • source
  • hideshow 2 child comments
  • [–] 3 points 1 month ago

    Thanks for the PSA, I got hit before any of this was live

  • source
  • [–] 3 points 1 month ago (1 child)

    “Accidental” — you are far more trusting than I

  • source
  • hideshow 1 child comment
  • [–] 14 points 1 month ago

    If you check the github discussion from the devs that patched the issue it doesn't seem intentional to me (not an expert). That being said I assumed the same thing.

    My browser auto updated the extension at a very inopportune time and from some reason KDE connect from my phone to computer which is usually very reliable also wouldn't connect. Was quite annoying until I realized I can just log into the vaultwarden website directly. I don't think I've done that in years

  • source
  • parent
  • load more comments
    view more: next ›