If you need assistance securing your password keeper, please contact SensCy. Make sure you only enter your credentials on a legitimate website or application and immediately implement Multi-factor Authentication on your Password Manager accounts. It is unclear if the phishing can bypass the MFA. Once the credentials are submitted on the phishing page, it redirects users to the legitimate Bitwarden login page.

The domain used in the ad was ‘’ and, when clicked, redirected users to the site ‘.’ The page at ‘’ replicates the legitimate Bitwarden Web Vault login page. Last Tuesday, Bitwarden users began seeing a Google ad titled ‘Bitwarden – Password Manager’ in search results for “bitwarden password manager.” (See picture below) SensCy urges users to stay vigilant when entering logins and master passwords. Threat actors have recently targeted password managers, including LastPass and Norton LifeLock, to access logins and other credentials. Many users have found that Bitwarden password vaults were targeted in Google ads phishing attacks to steal Bitwarden users’ credentials, including master passwords necessary to access encrypted password vaults. Mobile apps are available for both iOS (10.0. 80.In today’s Cyber Brief, SensCy analyzes a new phishing trend targeted at password managers, notably Bitwarden. There are Bitwarden desktop browser extensions for Chrome, Safari, Firefox, Opera, Brave, Microsoft Edge, Vivaldi and the Firefox-based Tor browser. I was able to downgrade and check that it works properly. I also can confirm that the issue wasn't happening with Chrome. When you select 'On Browser restart' you close all the windows without quitting the actual browser, you reopen a new page: the vault had not locked.

I tested the extension in Firefox and Safari: it is working ok. The vault lock every time you reopen a new window even though the time set is not expired or if the Chrome was not closed. It would lock once the time previously set expired or if you totally quit chrome (CMQ+Q) Actual Result Close every single page on Mac without actually quitting the browser.Set the Vault Timeout 'On Browser Restart' or any kind of time minutes (Lock or Logout).Open the browser vault settings in Chrome.

Google chrome bitwarden