Bitwarden's Schrödinger Registration Flow: A Security UX Fail

2025-05-15
Bitwarden's Schrödinger Registration Flow: A Security UX Fail

A security architect, “Юленька”, uncovered a logical flaw in Bitwarden's registration process. Users could start registration on Device A, but complete it (including setting the master password) on Device B, resulting in account creation failure and unusable apps. After a dismissive response from Bitwarden, “Юленька” creatively reported the issue using a humorous stand-up routine. The issue appears resolved, but Bitwarden offered no acknowledgement or changelog. This highlights the need for better UX design in security products and emphasizes the importance of clear communication in resolving security issues.

Development