I understand that if you have Bitwarden (or any password manager or browser) configured to autofill your password when it encounters a "password" field on a web form, an easy exploit is for the web form to have hidden form fields (e.g., address, phone, email, ssn) and your autofill app will fill in your info into those fields, even though you only wanted it to autofill the login.

But when you have autofill turned off and you click in a form's "login" field and select a login from Bitwrden's contextual menu, Bitwarden automatically also fills in the "Password" field. Does this mean that the exploit exists even if autofill is turned off, as long as you're using any form of an "auto-fill" function?

I set up BitWarden for my mum ages back and thought nothing of it. She's been using it fine and hasn't had a problem. Only, now that I've gone to set it up on a new device for her, I'm realising I don't remember her master password. Neither does she. She's been using the biometric login the whole time. Anyone know any way around this?

cross-posted from: https://lemm.ee/post/33197502

The ports 80 and 443 are already used by Adguard Home. I didnt find any way to change those ports for Bitwarden.

Given that passkey support has been out for a few months, I'm wondering if you've switched any of your existing logins?