What Bitwarden is
Bitwarden is a password manager made by Bitwarden, Inc. It stores your passwords, passkeys, credit cards, identities and secure notes in an encrypted vault, fills them into websites and apps, and syncs them across your computers and phone. Its distinguishing points are that the code is published on GitHub (under the AGPL and Bitwarden's own license), that the company publishes yearly independent security audits, and that the free plan has no limit on passwords or devices.
It serves individuals, families and businesses. Business plans add shared collections, admin controls, directory sync, SSO and, on Enterprise, self-hosting. Bitwarden also sells a separate Secrets Manager for developer credentials and a standalone Bitwarden Authenticator app, but this review focuses on the password manager.
Key features
- Unlimited passwords and devices, free. The free plan has no cap on stored items or on how many devices sync.
- Passkeys. Store and sign in with passkeys from the browser extension and apps.
- Password generator and username generator, including integration with email alias services so each site can get its own address.
- Bitwarden Send for sharing a piece of text or a file through an encrypted, expiring link, on every plan.
- Sharing. Free and Premium users can share with one other person; Families and business plans share through collections.
- Integrated authenticator (Premium). Store two-factor (TOTP) codes with the login and have them copied when Bitwarden fills a password.
- Emergency access (Premium). Let a trusted person request access to your vault after a waiting period you set.
- Vault health reports (Premium). Flags reused, weak and exposed passwords and sites that support two-factor login.
- File attachments (Premium). 5 GB of encrypted storage for documents, expandable.
- Command-line tool and self-hosting for technical users and organizations that want to keep the server in-house.
Bitwarden pricing (as of October 2026)
Prices below are from Bitwarden's pricing page, in US dollars, excluding tax. Business plans are shown with annual billing.
| Plan | Price | Who it's for / what it adds |
|---|---|---|
| Free | $0 | Unlimited passwords and devices, passkeys, Send, sharing with one other person |
| Premium | $19.80/year ($1.65/month) | Authenticator codes, 5 GB attachments, emergency access, security reports |
| Families | $47.88/year ($3.99/month) | Premium for up to 6 people, unlimited sharing and collections |
| Teams | $4 per user/month, billed annually | Shared collections, event logs, directory sync, SCIM |
| Enterprise | $6 per user/month, billed annually | SSO, enterprise policies, self-hosting, free Families plan for each user |
For comparison, 1Password's individual plan is $3.99 a month billed yearly at its regular price, roughly two and a half times Bitwarden Premium, and 1Password has no free plan at all.
Strengths
- The best free plan among major password managers. Many rivals limit free users to one device type or a handful of passwords. Bitwarden doesn't.
- Very cheap upgrades. Premium is $19.80 a year, and Families covers six people for under $48 a year.
- Transparency. Public source code and a long list of published audits from firms such as Cure53, plus a 2025 cryptography review by ETH Zurich's Applied Cryptography Group, listed on its compliance page.
- Runs everywhere. Windows, macOS, Linux, iOS, Android, a web vault, a CLI and extensions for nearly every browser, including Firefox, Safari, Brave, Vivaldi and Tor Browser.
- Self-hosting option for organizations that must keep data on their own servers.
- Business plans are good value, with SCIM and directory sync on Teams rather than only at the top tier.
Weaknesses
- Less polished apps. A common pattern in user feedback is that Bitwarden's interface is plainer and its autofill a little less smooth than 1Password's, especially in apps and on unusual login forms.
- Fewer extras. There is no equivalent of 1Password's Travel Mode, and features like watching for breaches are reports you run rather than always-on alerts.
- Free sharing is narrow. On the free plan you can share with just one other person; a household needs Families.
- Self-hosting takes work. Running your own server means you are responsible for updates, backups and uptime.
- Master password is everything. As with any zero-knowledge manager, if you forget your master password and have no recovery option set up, Bitwarden cannot recover your vault.
Privacy and security
Bitwarden states that your vault is encrypted and decrypted on your device, with keys derived from your master password, so the server only ever stores encrypted data. You can add two-step login with an authenticator app, email, a hardware security key or Duo. The company says it completes annual third-party audits, including source code assessments and penetration tests, and publishes the reports.
On compliance, Bitwarden says it has completed SOC 2 Type 2 and SOC 3 reports, is ISO 27001 certified, gets a yearly third-party HIPAA Security Rule audit and complies with GDPR and CCPA. Those are the company's own statements; check its compliance page and ask for reports if your organization requires them. Cloud data can be hosted in the US or the EU.
Platforms
- Desktop: Windows, macOS and Linux apps.
- Mobile: iPhone, iPad and Android (including an F-Droid build).
- Browsers: Chrome, Edge, Firefox, Safari, Opera, Brave, Vivaldi, DuckDuckGo and Tor Browser extensions.
- Web vault in any browser, and a command-line tool for Windows, macOS and Linux.
Who should use Bitwarden
Bitwarden suits people who are moving off browser-saved passwords or sticky notes and want something safe without a subscription, families on a budget, Linux users, and small businesses that want proper admin controls at $4 a seat. It is also the natural pick if open source and published audits matter to you.
It is a weaker fit if the people you are buying for are less technical and you want the smoothest possible experience, or if you travel across borders and want to hide vaults on the device temporarily. Those buyers usually lean toward 1Password.
Free vs Premium: is the upgrade worth it?
For many people the free plan is enough: it does the one job that matters most, giving every account a unique, strong password that fills itself in. The case for Premium at $19.80 a year comes down to three features:
- Integrated authenticator. If you use two-factor codes on many sites, having Bitwarden copy the code right after it fills the password saves real time. The trade-off is that your password and second factor live in the same vault; some security-minded users prefer to keep codes in a separate app, such as the free Bitwarden Authenticator.
- Emergency access. A simple way to make sure a partner or relative can reach your accounts if something happens to you, after a waiting period you control.
- Vault health reports. A periodic check for reused, weak and exposed passwords is a good habit, especially after moving years of old passwords in from a browser.
If two or more people in your household would pay for Premium, Families ($47.88 a year for up to six people) is the better deal, and it adds shared collections so you can share the streaming, utility and bank logins everyone needs.
Getting started well
- Choose a long master password you can remember, such as four or five random words, and write it down somewhere safe at home. Bitwarden cannot reset it.
- Turn on two-step login for your Bitwarden account itself, ideally with an authenticator app or a hardware key, and save the recovery code.
- Import from your browser or old manager (Bitwarden accepts exports from Chrome, Firefox, Safari, 1Password, LastPass and others), then turn off the browser's own password saving so you don't end up with two vaults.
- Fix the worst passwords first: email, banking and anything that can reset other accounts.
Alternatives
- 1Password: the polished, paid alternative with Travel Mode, a Secret Key on top of your password and strong family features. See our 1Password vs Bitwarden comparison.
- Your browser or phone's built-in manager (Apple Passwords, Google Password Manager): free and convenient if you live in one ecosystem, but weaker across platforms.
- KeePass and its forks: free, fully offline vault files you sync yourself. More control, more effort.
If you are reorganizing more of your digital life, our reviews of Notion and Obsidian cover where to keep your notes, though neither should hold your passwords.