Cannot read properties of null (reading 'toWrappedAccountCryptographicState') when using Bitwarden Extension on Edge

[ROXASBrandon]

Prerequisites

• I have searched the existing Closed AND Open Issues AND Discussions
• I have searched and read the documentation

Vaultwarden Support String

Your environment (Generated via diagnostics page)

• Vaultwarden version: v1.35.4
• Web-vault version: v2026.1.1
• OS/Arch: linux/x86_64
• Running within a container: true (Base: Debian)
• Database type: SQLite
• Database version: 3.50.2
• Uses config.json: true
• Uses a reverse proxy: true
• IP Header check: true (X-Real-IP)
• Internet access: true
• Internet access via a proxy: false
• DNS Check: true
• Browser/Server Time Check: true
• Server/NTP Time Check: true
• Domain Configuration Check: true
• HTTPS Check: true
• Websocket Check: true
• HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Environment settings which are overridden: DOMAIN, SENDS_ALLOWED, SIGNUPS_VERIFY, SIGNUPS_DOMAINS_WHITELIST, ORG_CREATION_USERS, EMERGENCY_ACCESS_ALLOWED, EMAIL_CHANGE_ALLOWED, PASSWORD_HINTS_ALLOWED, ADMIN_TOKEN, INVITATION_ORG_NAME, SMTP_HOST, SMTP_SECURITY, SMTP_PORT, SMTP_FROM

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": true,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 10,
  "admin_ratelimit_seconds": 60,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_idle_timeout": 600,
  "database_max_conns": 10,
  "database_min_conns": 2,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "dns_prefer_ipv6": false,
  "domain": "*****://******************************",
  "domain_origin": "*****://******************************",
  "domain_path": "",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": true,
  "email_attempts_limit": 3,
  "email_change_allowed": false,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": false,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Personal",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": "/data/vaultwarden.log",
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f%z",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "************************",
  "org_events_enabled": true,
  "org_groups_enabled": false,
  "password_hints_allowed": false,
  "password_iterations": 600000,
  "purge_incomplete_sso_auth": "0 20 0 * * *",
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "******************,*****************",
  "signups_verify": true,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": null,
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "**************************",
  "smtp_from_name": "***********",
  "smtp_host": "*****************************",
  "smtp_password": null,
  "smtp_port": 25,
  "smtp_security": "off",
  "smtp_ssl": null,
  "smtp_timeout": 15,
  "smtp_username": null,
  "sso_allow_unknown_email_verification": false,
  "sso_audience_trusted": null,
  "sso_auth_only_not_session": false,
  "sso_authority": "",
  "sso_authorize_extra_params": "",
  "sso_callback_path": "*****://***********************************************************",
  "sso_client_cache_expiration": 0,
  "sso_client_id": "",
  "sso_client_secret": "***",
  "sso_debug_tokens": false,
  "sso_enabled": false,
  "sso_master_password_policy": null,
  "sso_only": false,
  "sso_pkce": true,
  "sso_scopes": "email profile",
  "sso_signups_match_email": true,
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": true,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Vaultwarden Build Version

v1.35.4

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

haproxy 2.8.14-c23fe91

Host/Server Operating System

Linux

Operating System Version

Rocky Linux 9.7 (Blue Onyx)

Clients

Browser Extension

Client Version

Microsoft Edge - Bitwarden Password Manager extension v2026.2.0

Steps To Reproduce

1. Go in Bitwarden Browser extension
2. Click on Accessing and change to self-hosted
3. Fill in Server URL with VaultWarden HTTPS URL and press Save
4. Fill in Email address and Password
5. Click Login with master password Button

Expected Result

Vault should load in the browser extension after entering email and password and clicking log in.

Actual Result

An error banner shows up saying
An error has occurred
Cannot read properties of null (reading 'toWrappedAccountCryptographicState')

Logs

Screenshots or Videos

Additional Context

Someone else reported this on the official bitwarden community (lol)
https://community.bitwarden.com/t/google-chrome-extension-issue/94935

[BlackDex]

Try to clear all the extension data/cache or fully logout/remove the account from the extension, fully restart the browser, login again and see if that helps.

[anthomaxcool]

Same problem here. Tried on Opera GX 127.0.5778.96 with chromium version 143.0.7499.194. Tried removing and reinstalling the extension. Also tried on Chrome (Version 146.0.7680.154 (Official Build) (64-bit)) on which it was never installed before and also tried bitwarden cli (2026.2.0). All shows the same error as above. Also tried restarting the vaultwarden server.

No errors in the vaultwarden logs, it actually shows a successful login.

[BlackDex]

I'm not sure why it doesn't work for you, but i tested it with Edge (146.0.3856.62), Opera (129.0.5823.15), Brave (1.88.132), Chrome (146.0.7680.153) and Chromium (146.0.7680.80) all installed via their own app stores and all extensions were version 2026.2.0, and i can login just fine on all of them.

The only solution i know of is, fully logout of the extension, uninstall the extension, fully close the browser, restart the browser, install the extension again, login again.

Maybe there is some data left somewhere which is causing an issue, but not sure regarding that.

[anthomaxcool]

I hadn't updated the server properly. Now running on latest version and running smoothly.

[4ch1m]

I'm having similar issues:

• vaultwarden/server version: 1.35.4 (from hub.docker.com)
• bw client version: 2026.2.0 (from npm)

TypeError: Cannot read properties of null (reading 'toWrappedAccountCryptographicState')

[4ch1m]

I'm not using the (browser-)plugin, but the JavaScript CLI-client (inside a "clean" Docker container); no cache-clearing necessary.

I just downgraded the client to 2026.1.0; not it works again.

[BlackDex]

Then either your client is faulty or you really do not have the latest Vaultwarden running.
Maybe you would provide more details on how you actually use this we could help, but this is too vague.
With JavaScript CLI Client I think you mean the Bitwarden NPM CLI client, and i can only say that v2026.2.0 works just fine.

[4ch1m]

I don't think that the client is "faulty"; and I definitely have the latest (containerized) version of Vaultwarden running.

The CLI-client is running in a dedicated/custom container:

FROM node:25-trixie-slim

ARG BW_CLI_VERSION="2026.1.0"

WORKDIR /bw

RUN mkdir .config export && \
    chown -R node:node .

RUN npm install -g @bitwarden/cli@${BW_CLI_VERSION}

ENV NODE_OPTIONS="--no-deprecation"

USER node

VOLUME ["/bw/.config", "/bw/export"]

ENTRYPOINT ["/bw/entrypoint.sh"]

(The custom entrypoint simply runs my bw commands; login, export, etc.)

This worked perfectly for months/years.
(And still works when using BW-CLI 2026.1.0 together with the latest Vaultwarden container.)

Upgrading the CLI-client to 2026.2.0 ("latest" atm) breaks with the error message mentioned several times in this thread:

Cannot read properties of null (reading 'toWrappedAccountCryptographicState')

[BlackDex]

It works just fine for me. And you say you do not have a cache, but what are those volumes then?
Is there nothing in the /bw/.config which is caching your data?

I can login and sync just fine.

If you are talking about using --api-key then this is already fixed via #6922 in testing, and not yet in a stable release.

[4ch1m]

@BlackDex, thanks for your patience.

The volumes are empty/clean with every container run.
(These volumes are optional. .config is the config file. The export dir contains exported data.)

I actually do use bw login --api-key ... in my entrypoint-script.

So I will wait for the fix to be available in the stable release; and then test it again.

Thanks. 🙇

[LAWA-IT-Service]

Same issue here.
Versions:

• vaultwarden 1.35.4
• vaultwarden_webvault 2026.1.1

Reproduced with the latest extension downloaded directly from the Bitwarden website — same error as described above.
Tried the suggested fix: cleared all extension data/cache, fully logged out, restarted the browser — no success.
Workaround: Downgrading the browser extension to 2026.1.1 resolves the issue — login works without problems again.

[BlackDex]

As stated in my tests, i used v2026.2.0 extension version, and that worked just fine on all the browsers i mentioned in my previous post. Either you do not have the latest Vaultwarden version installed, or there is something else in between causing some issues.

Some logs or validation that you are really 100% running the latest Vaultwarden would help, like the Support String.

[CyberDuck79]

Same problem with bitwarden cli version 2026.2.0 and vaultwarden 1.35.4

bw login --apikey
? client_id: ...
? client_secret: ...
TypeError: Cannot read properties of null (reading 'toWrappedAccountCryptographicState')

nothing particular in the logs, no error or success.
note that, for me, browser extensions + desktop app works perfectly, it is just the bitwarden cli (which I need for the raycast extension).

[BlackDex]

In your case i would suggest to test if it isn't still cached data by setting a temporary directory for the cli profile.

https://bitwarden.com/help/cli/#log-in-to-multiple-accounts

# run this
export BITWARDENCLI_APPDATA_DIR="$(mktemp -d)"
# run the bw config stuff to set the correct server etc...
# run the login

[BlackDex]

Sorry, I just now noticed you are using --api-key this is already fixed in testing via #6922

[ROXASBrandon]

I've tried clearing cache multiple times before making this post. Seems to be a random occurrence. As attached in my report I am using the lastest version.

…

On Mon, Mar 23, 2026, 6:35 PM Flavien Henrion ***@***.***> wrote: Same problem with bitwarden cli version 2026.2.0 and vaultwarden 1.35.4 bw login --apikey ? client_id: ... ? client_secret: ... TypeError: Cannot read properties of null (reading 'toWrappedAccountCryptographicState') nothing particular in the logs, no error or success. note that, for me, browser extensions + desktop app works perfectly, it is just the bitwarden cli (which I need for the raycast extension). — Reply to this email directly, view it on GitHub <#6966?email_source=notifications&email_token=AAMVOPWZG4FUJUKIZR6F7WT4SG32LA5CNFSNUABIM5UWIORPF5TWS5BNNB2WEL2ENFZWG5LTONUW63SDN5WW2ZLOOQXTCNRSHAZTGMBXUZZGKYLTN5XKMYLVORUG64VFMV3GK3TUVRTG633UMVZF6Y3MNFRWW#discussioncomment-16283307>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAMVOPS2VCXEDIEIHADLEHT4SG32LAVCNFSM6AAAAACWXYIRWKVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTMMRYGMZTANY> . You are receiving this because you authored the thread.Message ID: ***@***.*** com>

[BlackDex]

A random occurrence is even more weird, and kinda looks like something in between us either providing cached results, or an other extension is causing the Bitwarden extension to break.

AdGuard for example is known to cause issues depending on the rules loaded. Other ad blockers or privacy tools might cause the same.

[LAWA-IT-Service]

However, the version v2026.2.0 has not been released yet.
Do you have any information on when this version is expected to be released?

[stefan0xC]

However, the version v2026.2.0 has not been released yet. Do you have any information on when this version is expected to be released?

The version has already been released on March 5th.

[LAWA-IT-Service]

Thanks for your reply.

I realize now that this might not be the right thread for my question.

I was specifically asking about the release of v2026.2.0 in the bw_web_builds repository, not the browser extension.

Sorry for the confusion.

[BlackDex]

It's in our testing builds of Vaultwarden already.
Any specific reason you need it?

[LAWA-IT-Service]

Thanks for the clarification.

I'm hoping that this version resolves the login issues we are currently experiencing, especially with newer client versions.

We are heavily using the Bitwarden Desktop application on Windows 11, and this is where the login problem starts. After installing version 2026.1.1 of the desktop app, everything works initially, but on the second start it automatically updates to version 2026.2.1.

After this automatic update, the login issues begin to occur.

So this seems to be directly related to newer client versions being ahead of the web vault version.