#22991·clients

opening popup shouldn't request activeTab / page access

Author: HauseMasterZCreated Sep 4, 2026Updated Sep 17, 2026
Labelsbugbrowser

Steps To Reproduce

  1. set bitwarden to "on specific sites" in chrome
  2. go to any other site
  3. click bitwarden or press shortcut to copy a password

Expected Result

vault popup opens so i can copy my password or 2fa code. opening an extension's popup UI does not need activeTab or webpage permissions.

Actual Result

chrome blocks the popup with a reload prompt because bitwarden's action requests activeTab / page access just to show the vault UI. this wipes out any form progress on the page.

other extensions (like 2FA authenticators or standalone utilities) open their popup on restricted sites without any reload prompts because they don't request activeTab on click. bitwarden shouldn't be asking for page injection permissions just to open the vault.

Screenshots or Videos

No response

Additional Context

No response

Operating System

Windows

Operating System Version

No response

Web Browser

Chrome

Browser Version

No response

Environment Versions

v2026.8.0

Issue Tracking Info

  • I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.