opening popup shouldn't request activeTab / page access
Author: HauseMasterZCreated Sep 4, 2026Updated Sep 17, 2026
Labelsbugbrowser
Steps To Reproduce
- set bitwarden to "on specific sites" in chrome
- go to any other site
- click bitwarden or press shortcut to copy a password
Expected Result
vault popup opens so i can copy my password or 2fa code. opening an extension's popup UI does not need activeTab or webpage permissions.
Actual Result
chrome blocks the popup with a reload prompt because bitwarden's action requests activeTab / page access just to show the vault UI. this wipes out any form progress on the page.
other extensions (like 2FA authenticators or standalone utilities) open their popup on restricted sites without any reload prompts because they don't request activeTab on click. bitwarden shouldn't be asking for page injection permissions just to open the vault.
Screenshots or Videos
No response
Additional Context
No response
Operating System
Windows
Operating System Version
No response
Web Browser
Chrome
Browser Version
No response
Environment Versions
v2026.8.0
Issue Tracking Info
- I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
Source: bitwarden/clients