Bitwarden Desktop v2026.10.2 adds Linux biometric unlock via Secret Service

Bitwarden has released version 2026.10.2 of its desktop client, introducing several significant feature enhancements and security improvements. A major highlight for Linux users is the addition of persistent biometric unlocking, which utilizes the Secret Service API to manage authentication credentials.

The update also expands autofill capabilities, including the rollout of the macOS autofill extension to the stable channel and improved passkey provider integration. Additionally, the release includes enhanced data import tools, such as direct 1Password importing via the SDK, and various UI refinements for vault management and table customization.

Technical improvements in Bitwarden Desktop v2026.10.2

• Linux Biometrics: Implements persistent biometric unlock on Linux systems by leveraging the Secret Service API for secure credential storage.
• Passkey & WebAuthn: Enhances desktop autofill by exposing OS passkey plugin status APIs, implementing passkey provider OS settings APIs, and propagating native WebAuthn errors.
• Security & SDK Updates: Bumps the desktop_native SDK to support XAES user keys and introduces an XXE (XML External Entity) guard to improve parser security.
• Data Portability: Adds direct 1Password import functionality through the SDK for both desktop and browser extension users.
• Performance & Testing: Introduces new performance measurements for the unlock and sync processes, alongside a new end-to-end test suite for key management.

Why it matters

The integration of the Secret Service API provides Linux users with a more seamless and secure biometric experience consistent with modern desktop environments. Furthermore, the improved passkey and WebAuthn handling strengthens the overall security posture for users transitioning to passwordless authentication workflows.