Unable to sync/log in with Android app #6178
Replies: 9 comments 4 replies
-
|
Not a bug. Since version 2025.7.2 of the Android app all self-hosted deployments need to be behind HTTPS: https://github.com/bitwarden/android/releases/tag/v2025.7.2-bwpm |
Beta Was this translation helpful? Give feedback.
-
|
That's hard for me. Maybe some of us use Cloudflare Tunnels and just want to connect to an IP address locally. |
Beta Was this translation helpful? Give feedback.
-
|
I've been looking for a while now, and clueless as to how to even implement this. |
Beta Was this translation helpful? Give feedback.
-
|
I also have an issue now to log in from firefox add-in or ios app, but I can access my vault without any issue in a web browser also from outside my house, I am clueless. |
Beta Was this translation helpful? Give feedback.
-
|
Same here, but it's even more weird. Android app doesn't work, Brave/Chrome app doesn't work, BUT Firefox addon and normal browser access work! On Android the error in my case is:
Version: 2025.7.2 (20551) Maybe the same issue!? |
Beta Was this translation helpful? Give feedback.
-
|
This looks like a HTML is returned instead of the wanted JSON. |
Beta Was this translation helpful? Give feedback.
-
I have the same issue using cloudflare as reverse proxy. When I add a bypass all policy in cloudflare the isssue is solved. ( but I don't want to bypass all ) |
Beta Was this translation helpful? Give feedback.
-
|
I had the same issue using Tailscale on Unraid. The solution was to serve the port as https, using the following the the Unraid terminal
Solution from here https://forums.unraid.net/topic/163159-tailscale-vaultwarden/ |
Beta Was this translation helpful? Give feedback.
-
Android client: self signed certificate in certificate chain, SSL validation failedHello, I’m running into an SSL certificate validation issue with my self-hosted Vaultwarden. 1. Environment
2. Issue
3. Troubleshooting so far
4. Possible causes I suspect
5. Questions
|
Beta Was this translation helpful? Give feedback.
-
|
Same problem with Android app v2025.8 : Version: 2025.8.0 (20577) 
So : On Bitwarden extension for Brave Windows, HTTP connexion is possible without any problem (on local and remote with VPN WireGuard) |
Beta Was this translation helpful? Give feedback.
-
I know right! Give us an option with a checkbox: KNOW THE RISKS (like other things in settings). |
Beta Was this translation helpful? Give feedback.
-
|
Problem is in Bitwarden official android app... |
Beta Was this translation helpful? Give feedback.
-
|
I ran into this same issue and was able to solve it by enabling vaultwarden's builtin ROCKET_TLS with a self-signed certificate for the local IP of my vaultwarden server and add it to my Android device without root. This may not be the best, simplest, or even safest way to set things up, but I feel it could help someone get things working, so here we go... Generate a self-signed key for your local IPsource: https://bitwarden.com/help/certificates/ Install the certificate.crt on your Android device
source: https://support.google.com/pixelphone/answer/2844832?hl=en Run vaultwarden with your fancy new keyssource: https://github.com/dani-garcia/vaultwarden/wiki/Enabling-HTTPS Bitwarden Android should now be able to use your self-hosted vaultwarden via the local network IPexample: https://192.168.1.123/ |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Prerequisites
Vaultwarden Support String
Error Message
Stacktrace:
java.net.UnknownServiceException: CLEARTEXT communication to 192.168.1.134 not permitted by network security policy
Bd.t.b(Unknown Source:64)
Bd.t.a(Unknown Source:683)
Bd.t.f(Unknown Source:154)
Bd.l.d(Unknown Source:9)
Bd.l.a(Unknown Source:61)
Bd.b.intercept(Unknown Source:23)
Cd.g.b(Unknown Source:127)
Cd.b.intercept(Unknown Source:607)
Cd.g.b(Unknown Source:127)
Cd.a.intercept(Unknown Source:540)
Cd.g.b(Unknown Source:127)
Cd.a.intercept(Unknown Source:198)
Cd.g.b(Unknown Source:127)
Nd.b.intercept(Unknown Source:553)
Cd.g.b(Unknown Source:127)
com.bitwarden.network.interceptor.BaseUrlInterceptor.intercept(Unknown Source:42)
Cd.g.b(Unknown Source:127)
com.bitwarden.network.interceptor.HeadersInterceptor.intercept(Unknown Source:46)
Cd.g.b(Unknown Source:127)
Bd.q.d(Unknown Source:89)
Bd.n.run(Unknown Source:47)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:644)
java.lang.Thread.run(Thread.java:1012)
Version: 2025.7.2 (20551)
Device: 📱 samsung SM-X800 🤖 15@35 📦 prod
CI: 🧱 commit: bitwarden/android@277fcbf
💻 build source: bitwarden/android/actions/runs/16758228945/attempts/1
Running inside Proxmox.
Environment
Config & Details (Generated via diagnostics page)
Show Config & Details
Environment settings which are overridden: ADMIN_TOKEN
Config:
{ "_duo_akey": "***", "_enable_duo": true, "_enable_email_2fa": true, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "/opt/vaultwarden/data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "/opt/vaultwarden/data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "********************************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://***************", "domain_origin": "*****://***************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": "removed", "duo_ikey": "removed", "duo_skey": "***", "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "", "extended_logging": true, "helo_name": null, "hibp_api_key": "***", "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "/opt/vaultwarden/data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Vaultwarden", "invitations_allowed": false, "ip_header": "X-Forwarded-For", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "purge_incomplete_sso_nonce": "0 20 0 * * *", "push_enabled": true, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "/opt/vaultwarden/data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "/opt/vaultwarden/data/sends", "show_password_hint": false, "signups_allowed": false, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": "TLS", "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "**********************", "smtp_from_name": "Vaultwarden", "smtp_host": "**************", "smtp_password": "***", "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": "**********************", "sso_allow_unknown_email_verification": false, "sso_audience_trusted": null, "sso_auth_only_not_session": false, "sso_authority": "", "sso_authorize_extra_params": "", "sso_callback_path": "*****://********************************************", "sso_client_cache_expiration": 0, "sso_client_id": "", "sso_client_secret": "***", "sso_debug_tokens": false, "sso_enabled": false, "sso_master_password_policy": null, "sso_only": false, "sso_pkce": true, "sso_scopes": "email profile", "sso_signups_match_email": true, "templates_folder": "/opt/vaultwarden/data/templates", "tmp_folder": "/opt/vaultwarden/data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "/opt/vaultwarden/web-vault", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null }Vaultwarden Build Version
1.34.3-8e7eeab2
Deployment method
Other method
Custom deployment method
Proxmox, fully updated.
Reverse Proxy
Cloudflare tunnel
Host/Server Operating System
Linux
Operating System Version
Proxmox
Clients
Android
Client Version
2025.7.2
Steps To Reproduce
Login via the android app.
Expected Result
Login
Actual Result
An error occurred. etc
Logs
Screenshots or Videos
No response
Additional Context
I was not able to sync the android app on either phone/tablet. So I logged out from tablet, and now am unable to login. The error is below:
Stacktrace:
java.net.UnknownServiceException: CLEARTEXT communication to 192.168.1.134 not permitted by network security policy
Bd.t.b(Unknown Source:64)
Bd.t.a(Unknown Source:683)
Bd.t.f(Unknown Source:154)
Bd.l.d(Unknown Source:9)
Bd.l.a(Unknown Source:61)
Bd.b.intercept(Unknown Source:23)
Cd.g.b(Unknown Source:127)
Cd.b.intercept(Unknown Source:607)
Cd.g.b(Unknown Source:127)
Cd.a.intercept(Unknown Source:540)
Cd.g.b(Unknown Source:127)
Cd.a.intercept(Unknown Source:198)
Cd.g.b(Unknown Source:127)
Nd.b.intercept(Unknown Source:553)
Cd.g.b(Unknown Source:127)
com.bitwarden.network.interceptor.BaseUrlInterceptor.intercept(Unknown Source:42)
Cd.g.b(Unknown Source:127)
com.bitwarden.network.interceptor.HeadersInterceptor.intercept(Unknown Source:46)
Cd.g.b(Unknown Source:127)
Bd.q.d(Unknown Source:89)
Bd.n.run(Unknown Source:47)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:644)
java.lang.Thread.run(Thread.java:1012)
Version: 2025.7.2 (20551)
Device: 📱 samsung SM-X800 🤖 15@35 📦 prod
CI: 🧱 commit: bitwarden/android@277fcbf
💻 build source: bitwarden/android/actions/runs/16758228945/attempts/1
Beta Was this translation helpful? Give feedback.
All reactions