Vault credential protection

[libre-max]

Code Contribution Proposal

Each time Bitwarden is unlocked with the master password, the full database is exposed to any malicious software running on the PC.
To reduce this type of attacks, I would propose that "Master password" unlocks partially the database to get access of name, login and URL of vaults entries (with integrity protection to detect phishing site)
Then, each time, a credential (password, passkey, OTP) is exposed outside of the vault to fill an authentication form, a second action is required to fully unlock the vault item : either with a PIN or security key push button, or NFC contact.
That is my view to reduce credentials leak  .... (more secure than timeout inactivity expiration)
Thanks in advance for the discussion on this topic

[djsmith85]

Hey @libre-max is this a feature request or code that you would like to contribute to the Bitwarden codebase?

[libre-max]

A feature request, because I am not a dev

[djsmith85]

Thanks for confirmation! Can you repost in the feature request section of the forums? Closing this one out for now, as this area is for proposing and working on code contributions to the Bitwarden codebase.