# Yubikey is not reprompted

**URL:** <https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868>\
**Category:** Uncategorized\
**Created:** [August 6, 2024, 1:28pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868 "2024-08-06T13:28:30Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Heimdall](https://avatars.discourse-cdn.com/v4/letter/h/c2a13f/32.png) [@Heimdall](https://vaultwarden.discourse.group/u/Heimdall)\
**Post date:** [August 6, 2024, 1:28pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/1 "2024-08-06T13:28:30Z")

</div>

Hey,

when I didnt login for a longer period, Vaultwarden seems to expect my Key again, but its not enforcing it, its simply not logging in anymore.

Only way out is completely logout and login again.

Is there any way around?

---

<div class="post-metadata">

**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\
**Post date:** [August 6, 2024, 2:14pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/2 "2024-08-06T14:14:55Z")

</div>

Not sure what you mean here.  
I have never seen this happen my self.

Check the logs to see what happens.

Also provide a more detailed steps of events what you see happening and what you expected to see. And if possible provide logs and screenshots.

---

<div class="post-metadata">

**Author:** ![Heimdall](https://avatars.discourse-cdn.com/v4/letter/h/c2a13f/32.png) [@Heimdall](https://vaultwarden.discourse.group/u/Heimdall)\
**Post date:** [August 6, 2024, 3:20pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/3 "2024-08-06T15:20:03Z")

</div>

Well lets say I werent logging in for 2 weeks plus in some browser.

Then I put in my Password and nothing happens.

I have to completely logout, login again, prompt my Key and then I am able to use it again.

I cannot provide screenshots and logs yet, because I dont have achieved it again, but its reproducable with enough waiting time ^^

Do you need a log from the Bitwarden browser extension (have to look if there is one) or from somewhere in Vaultwarden?

---

<div class="post-metadata">

**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\
**Post date:** [August 6, 2024, 3:37pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/4 "2024-08-06T15:37:34Z")

</div>

Mostly the Vaultwarden logs are useful to us.  
But it might be some proxy or even web-vault issues.

---

<div class="post-metadata">

**Author:** ![Heimdall](https://avatars.discourse-cdn.com/v4/letter/h/c2a13f/32.png) [@Heimdall](https://vaultwarden.discourse.group/u/Heimdall)\
**Post date:** [August 6, 2024, 4:09pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/5 "2024-08-06T16:09:46Z")

</div>

No Proxy involved and it happens in basically every browser, if you don’t use it for long enough 😅

---

<div class="post-metadata">

**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\
**Post date:** [August 6, 2024, 4:29pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/6 "2024-08-06T16:29:17Z")

</div>

Then maybe browser cache or extensions which clean or block stuff.

---

<div class="post-metadata">

**Author:** ![Heimdall](https://avatars.discourse-cdn.com/v4/letter/h/c2a13f/32.png) [@Heimdall](https://vaultwarden.discourse.group/u/Heimdall)\
**Post date:** [August 6, 2024, 4:36pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/7 "2024-08-06T16:36:28Z")

</div>

that would kinda say the cache of 3 different browser is the same on 2 operating systems.

Well anyways. I try to deliver some logs once it happens again.

---

<div class="post-metadata">

**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\
**Post date:** [August 6, 2024, 5:23pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/8 "2024-08-06T17:23:38Z")

</div>

Well, if you use some tool to clean cache etc… from your whole computer, that might be the case.  
Also, if those browser sync there data, that might be the case.

But lets await the logs, because without this it’s a guessing game.

---

<div class="post-metadata">

**Author:** ![Heimdall](https://avatars.discourse-cdn.com/v4/letter/h/c2a13f/32.png) [@Heimdall](https://vaultwarden.discourse.group/u/Heimdall)\
**Post date:** [August 6, 2024, 5:29pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/9 "2024-08-06T17:29:59Z")

</div>

Browsers are not synced.

We are talking of complete different browsers, Brave, Firefox and Chrome on Windows and Mac without sync enabled.

Cache is not cleared by any tool ^^

---

<div class="post-metadata">

**Author:** ![cksapp](https://avatars.discourse-cdn.com/v4/letter/c/b9e5f3/32.png) [@cksapp](https://vaultwarden.discourse.group/u/cksapp)\
**Post date:** [August 6, 2024, 5:34pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/10 "2024-08-06T17:34:38Z")

</div>

> [@Heimdall](#):
>
> Well lets say I werent logging in for 2 weeks plus in some browser.
> 
> Then I put in my Password and nothing happens.
> 
> I have to completely logout, login again, prompt my Key and then I am able to use it again.

One thing I guess I want to clarify with this point, you mention logging out of the client.

Are you attempting to login fully, or just unlock when you are getting this error and then have to log out completely?

[Understanding unlock vs. log in](https://bitwarden.com/help/unlock-with-pin/#understanding-unlock-vs-log-in)

---

<div class="post-metadata">

**Author:** ![cksapp](https://avatars.discourse-cdn.com/v4/letter/c/b9e5f3/32.png) [@cksapp](https://vaultwarden.discourse.group/u/cksapp)\
**Post date:** [August 6, 2024, 5:35pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/11 "2024-08-06T17:35:19Z")

</div>

Also is this in the web-vault or the browser extension?

---

<div class="post-metadata">

**Author:** ![Heimdall](https://avatars.discourse-cdn.com/v4/letter/h/c2a13f/32.png) [@Heimdall](https://vaultwarden.discourse.group/u/Heimdall)\
**Post date:** [August 6, 2024, 5:45pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/12 "2024-08-06T17:45:38Z")

</div>

I am trying to simply unlock the Browser Extensions.

That is then not working anymore and I have to log out and login fresh to get it working again as expected.

---

<div class="post-metadata">

**Author:** ![cksapp](https://avatars.discourse-cdn.com/v4/letter/c/b9e5f3/32.png) [@cksapp](https://vaultwarden.discourse.group/u/cksapp)\
**Post date:** [August 6, 2024, 6:00pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/13 "2024-08-06T18:00:57Z")

</div>

Unlock with PIN or Biometrics with the browser extension?

Either way it should simply unlock the Vault and not “hang” as you say with no items shown.  
The Yubikey would not be re-prompted for Unlock, only Login as the 2FA is only set for logging in to the Vault and if you have left the “ **Remember me** ” option unchecked.

> **[Two-step Login via FIDO2 WebAuthn | Bitwarden Help Center](https://bitwarden.com/help/setup-two-step-login-fido/#use-fido2-webauthn)**
>
> This article explains how you can add an extra layer of protection to your Bitwarden Vault by setting up two-step login with a FIDO2 WebAuthn authenticator.

---

<div class="post-metadata">

**Author:** ![Heimdall](https://avatars.discourse-cdn.com/v4/letter/h/c2a13f/32.png) [@Heimdall](https://vaultwarden.discourse.group/u/Heimdall)\
**Post date:** [August 6, 2024, 6:28pm UTC](https://vaultwarden.discourse.group/t/yubikey-is-not-reprompted/3868/14 "2024-08-06T18:28:07Z")

</div>

I unlock with password and or biometrics on Mac. No Biometrics on Windows.

But yes it hangs at the password window forever. Only way to get it unlocked again is log out and fresh login.
