cannot log into expired session on desktop with browser handoff (e.g. if the system doesn't support passkeys)

(#4706) Bug Open: Needs triage desktop security

Reproduction steps

  1. Do Not Have a passkey provider on your desktop session (e.g. i use Bitwarden, which supports it on mac/windows, but not on linux, so i can only use those passkeys in the browser extension)
    • 0b. also, have a passkey on your account, and be logged into the desktop app (e.g. via browser handoff)
  2. expire your desktop session
  3. try to log into the expired desktop session

Expected behaviour

The desktop app, recognizing that my system doesn't support passkeys (or even if it does support passkeys!), should offer me the ability to use browser handoff (because browsers are more likely to support passkeys)

Actual behaviour

The desktop app prompts me for my password, and then a passkey, which is impossible to provide without registering a new passkey with a different passkey provider.

Build information

Stable Desktop 2026.1101.230756, Web 2026.1101.230756, Linux 6.18.55 (x64), Electron 44.9.1, Chrome 152.0.7977.167, Node 24.22.0, Locale en-US

Platform

macOS, Windows, Linux

Evidence

The video clearly shows the described issue at the very beginning, where i am unable to refresh my expired session. Then, it shows #4708 before showing that i can still log in to the desktop app (but if and only if i try to "use another account"). It goes to expire that session to show #4709.

Comments

Sign in with Fluxer to comment and vote.

No comments yet.