[GH-ISSUE #6420] Logging in the Bitwarden Desktop Client or Browser Extension results in "KDE Config is required" message #2429

Closed
opened 2026-03-03 02:18:16 +03:00 by kerem · 3 comments
Owner

Originally created by @KHTD2004 on GitHub (Nov 1, 2025).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6420

Prerequisites

Vaultwarden Support String

Your environment (Generated via diagnostics page)

  • Vaultwarden version: v1.34.3
  • Web-vault version: v2025.7.0
  • OS/Arch: linux/x86_64
  • Running within a container: true (Base: Debian)
  • Database type: SQLite
  • Database version: 3.50.2
  • Uses config.json: false
  • Uses a reverse proxy: true
  • IP Header check: false (X-Forwarded-For)
  • Internet access: true
  • Internet access via a proxy: false
  • DNS Check: true
  • Browser/Server Time Check: false
  • Server/NTP Time Check: true
  • Domain Configuration Check: true
  • HTTPS Check: true
  • Websocket Check: true
  • HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": false,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://*************************************************",
  "domain_origin": "*****://***************************************",
  "domain_path": "**********",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Vaultwarden",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "",
  "signups_verify": false,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": null,
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "",
  "smtp_from_name": "Vaultwarden",
  "smtp_host": null,
  "smtp_password": null,
  "smtp_port": 587,
  "smtp_security": "starttls",
  "smtp_ssl": null,
  "smtp_timeout": 15,
  "smtp_username": null,
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Vaultwarden Build Version

v1.34.3

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

caddy v2.10.2

Host/Server Operating System

Linux

Operating System Version

Ubuntu 24.04.3 LTS x86_64

Clients

Browser Extension, Desktop

Client Version

Firefox 144.0.2

Steps To Reproduce

  1. Set Client/Extension to self hosted
  2. Fill out login data
  3. Select login

Expected Result

Successful login

Actual Result

An error message "KDE config is required" appears, even on systems without KDE Plasma like Windows 11

Logs

Logs don't show any new entry at the time this issue occurs

Screenshots or Videos

Image Image

Additional Context

This happens on the Pacman/APT version of the client on CachyOS and LMDE 7. It also happens on the flatpak version on LDME 7, the flatpak on CachyOS works fine (CachyOS actually uses KDE Plasma)
On Windows it happened on the direct .exe download from Bitwarden
The browser extension (Firefox) only works on CachyOS too.
Bitwarden Issue about the Desktop Client: https://github.com/bitwarden/clients/issues/17168
Bitwarden Issue about the Browser Extension: https://github.com/bitwarden/clients/issues/17169

I was told to report it here because the backend is vaultwarden even if the problem is on the client side so here we are

Originally created by @KHTD2004 on GitHub (Nov 1, 2025). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6420 ### Prerequisites - [x] I have searched the existing **Closed _AND_ Open** [Issues](https://github.com/dani-garcia/vaultwarden/issues?q=is%3Aissue%20) **_AND_** [Discussions](https://github.com/dani-garcia/vaultwarden/discussions?discussions_q=) - [x] I have searched and read the [documentation](https://github.com/dani-garcia/vaultwarden/wiki/) ### Vaultwarden Support String ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.34.3 * Web-vault version: v2025.7.0 * OS/Arch: linux/x86_64 * Running within a container: true (Base: Debian) * Database type: SQLite * Database version: 3.50.2 * Uses config.json: false * Uses a reverse proxy: true * IP Header check: false (X-Forwarded-For) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: false * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Websocket Check: true * HTTP Response Checks: true ### Config & Details (Generated via diagnostics page) <details><summary>Show Config & Details</summary> **Config:** ```json { "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://*************************************************", "domain_origin": "*****://***************************************", "domain_path": "**********", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Vaultwarden", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": true, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "", "smtp_from_name": "Vaultwarden", "smtp_host": null, "smtp_password": null, "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": null, "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> ### Vaultwarden Build Version v1.34.3 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy caddy v2.10.2 ### Host/Server Operating System Linux ### Operating System Version Ubuntu 24.04.3 LTS x86_64 ### Clients Browser Extension, Desktop ### Client Version Firefox 144.0.2 ### Steps To Reproduce 1. Set Client/Extension to self hosted 2. Fill out login data 3. Select login ### Expected Result Successful login ### Actual Result An error message "KDE config is required" appears, even on systems without KDE Plasma like Windows 11 ### Logs ```text Logs don't show any new entry at the time this issue occurs ``` ### Screenshots or Videos <img width="1627" height="1265" alt="Image" src="https://github.com/user-attachments/assets/f3c3d7fa-07b1-4768-b48d-1e9005724fb9" /> <img width="645" height="1027" alt="Image" src="https://github.com/user-attachments/assets/5b2bdff8-b282-433c-8387-2ca69b58ff4e" /> ### Additional Context This happens on the Pacman/APT version of the client on CachyOS and LMDE 7. It also happens on the flatpak version on LDME 7, the flatpak on CachyOS works fine (CachyOS actually uses KDE Plasma) On Windows it happened on the direct .exe download from Bitwarden The browser extension (Firefox) only works on CachyOS too. Bitwarden Issue about the Desktop Client: https://github.com/bitwarden/clients/issues/17168 Bitwarden Issue about the Browser Extension: https://github.com/bitwarden/clients/issues/17169 I was told to report it here because the backend is vaultwarden even if the problem is on the client side so here we are
kerem 2026-03-03 02:18:16 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@BlackDex commented on GitHub (Nov 1, 2025):

You say there are no logs, what about caddy logs?
Are you using any security config in caddy which might block requests?

<!-- gh-comment-id:3476472003 --> @BlackDex commented on GitHub (Nov 1, 2025): You say there are no logs, what about caddy logs? Are you using any security config in caddy which might block requests?
Author
Owner

@stefan0xC commented on GitHub (Nov 1, 2025):

It says KDF config not KDE. That stands for key derivation function and has nothing to do with your desktop environment.

The error message is thrown by the client because it doesn't get a valid response. Either because something is blocking it but more likely it is because you did not configure the server URL correctly when connecting your client. E.g. that error will be thrown if instead of /identity/accounts/prelogin it's requesting something like /#/vault/identity/accounts/prelogin. So if you have copied the URL from your browser you did not remove the appended #/login or #/vault.

<!-- gh-comment-id:3476734852 --> @stefan0xC commented on GitHub (Nov 1, 2025): It says KD**F** config not KDE. That stands for [key derivation function](https://bitwarden.com/help/kdf-algorithms/) and has nothing to do with your desktop environment. The error message [is thrown by the client](https://github.com/bitwarden/clients/blob/e68a47165579eaa150ed13a6f333be52b791aa62/libs/auth/src/common/services/login-strategies/login-strategy.service.ts#L333) because it doesn't get a valid response. Either because something is blocking it but more likely it is because you did not configure the server URL correctly [when connecting your client](https://bitwarden.com/help/change-client-environment/). E.g. that error will be thrown if instead of `/identity/accounts/prelogin` it's requesting something like `/#/vault/identity/accounts/prelogin`. So if you have copied the URL from your browser you did not remove the appended `#/login` or `#/vault`.
Author
Owner

@KHTD2004 commented on GitHub (Nov 1, 2025):

Error found, first I misread KDF for KDE, second a part of the URL is missing. User error indeed, todays not my day lmao. Case closed

<!-- gh-comment-id:3476759556 --> @KHTD2004 commented on GitHub (Nov 1, 2025): Error found, first I misread KDF for KDE, second a part of the URL is missing. User error indeed, todays not my day lmao. Case closed
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/vaultwarden#2429
No description provided.