[PM-30368] WebAuthn is not working on 2025.12.0 due to Invalid Target Origin

[WilliamWsyHK]

Steps To Reproduce

1. Type "Master Password" and login
2. In "Verify WebAuthn" page, press "Open WebAuthn" button
3. The page of "WebAuthn" is shown using Android's default browser in-app

Expected Result

The WebAuthn page should render correctly and allow user to complete the WebAuthn flow to login Bitwarden.

Actual Result

1. The page is shown with blank "WebAuthn" button as shown in screenshot
2. The F12 console (on PC, by copying the URL from android browser to PC) shows "bitwarden://webauthn-callback" is invalid target origin
3. Chrome remote debugging the Android Chrome page on the same page also gives the same error

Screenshots or Videos

Additional Context

No response

Build Version

2025.12.0

What server are you connecting to?

US

Self-host Server Version

No response

Environment Details

1. The screenshot is from this device

   • Device: OnePlus Ace 6T (Chinese version of OnePlus 15R)
   • OS: ColorOS 16 (Chinese version of OxygenOS; based on Android 16)

2. This is my previous device, encountered the same error

   • Device: Nokia 7 Plus
   • OS: Android 9

Issue Tracking Info

• I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

[WilliamWsyHK]

Just a reference on comment #5014 (comment) as it is showing the exact same screen.

[bitwarden-bot]

Thank you for your report! We've added this to our internal board for review.
ID: PM-30368