Bitwarden
Bitwarden is the only major password manager that is simultaneously free-tier-competitive, open-source, and self-hostable — a combination that makes it the default choice for security-mandated and cost-sensitive organizations. Essential in this category.
The take
What is Bitwarden?
Bitwarden is an open-source password manager founded in 2016 by Kyle Spearrin in Santa Barbara, California. It is the only major password manager with a combination of a competitive free tier, a GPL-3.0 open-source codebase, and a self-hosted deployment option.
The free tier is Bitwarden’s defining feature: unlimited passwords on unlimited devices with all client apps (browser extensions for Chrome, Firefox, Safari, and Edge; mobile apps for iOS and Android; desktop apps for Mac, Windows, and Linux; and a CLI). No competitor offers equivalent free-tier coverage without device limits or item caps. The product uses AES-256 encryption with a zero-knowledge model — vault data is encrypted on-device before syncing to Bitwarden’s servers.
It integrates with Okta, Azure AD, Google Workspace, and Duo for enterprise SSO and directory sync.
How does Bitwarden work?
Bitwarden is built on three components: the encrypted vault, the team organization system, and the self-hosted deployment infrastructure. The open-source codebase makes all three independently verifiable.
Encrypted vault and core features
The Bitwarden vault stores logins, secure notes, credit cards, and identities in encrypted categories. Items sync across all connected devices through Bitwarden’s cloud servers or a self-hosted server. The browser extension autofills credentials on matching sites and generates strong passwords and passphrases on demand. Passkey support is available on the mobile apps and browser extension.
The free vault has no item limit and no device limit. The only features behind the Premium paywall ($1.65/month, billed annually at $19.80) are TOTP code generation (replacing a separate authenticator app), Vault Health Reports (identifying weak, reused, or compromised passwords), encrypted file attachments up to 1GB, and emergency access designation. For most individual users, free is a complete solution.
Team organizations and collections
Bitwarden Organizations allow groups of users to share vault items through Collections — organized sets of credentials with defined access levels. Access levels range from read-only view to edit to admin.
Bitwarden’s approach is more flexible for complex permission hierarchies but requires more setup time. Teams new to password managers often find the 1Password onboarding more accessible; security-focused teams who have mapped their permission requirements in advance prefer Bitwarden’s granularity.
Self-hosted deployment
Bitwarden’s full server stack is available as open-source Docker containers that organizations can deploy on their own infrastructure. Official deployment documentation covers Linux servers, cloud VMs (AWS, Azure, GCP), and NAS devices for home use. Bitwarden Unified is a single-container deployment for small teams that reduces the infrastructure complexity of the multi-container standard deployment.
Vaultwarden — a community-maintained, Rust-based Bitwarden-compatible server — is a popular alternative for self-hosting with lower resource requirements. Vaultwarden is not maintained by Bitwarden Inc. but is widely used and has a strong security track record. Self-hosting removes Bitwarden’s cloud from the trust model entirely: vault data stays on your infrastructure.
Who uses Bitwarden in 2026?
The open-source community broadly recommends Bitwarden as the default password manager for new users — its free tier coverage removes the financial barrier without sacrificing the core security model.
IT and security teams at regulated organizations — healthcare, finance, legal, government — frequently choose Bitwarden for its self-hosted deployment option. Storing credentials on company-controlled infrastructure satisfies data residency requirements that prevent using third-party cloud password managers like 1Password or Dashlane. The self-hosted deployment is a documented compliance path rather than a workaround.
Developer communities represent a growing segment. Bitwarden’s CLI enables credential retrieval in shell scripts without exposing plaintext passwords. The SSH key storage in Bitwarden’s vault stores private keys alongside associated service credentials.
When should you skip Bitwarden?
Bitwarden is the wrong tool in these scenarios. Identify these before building your credential management around a platform that won’t support your needs.
- You need Travel Mode. 1Password is the only major password manager with Travel Mode — the ability to hide specific vaults so they don’t appear during border searches. If you regularly cross borders with sensitive professional credentials, 1Password’s Travel Mode has no Bitwarden equivalent.
- You prioritize UX over cost. 1Password’s browser extension autofill, mobile app design, and onboarding experience are measurably more polished than Bitwarden’s. If your team is skeptical about password managers and UX quality determines adoption, 1Password’s interface reduces the “this is annoying” barrier more effectively.
How much does Bitwarden cost?
Bitwarden has a free plan. Paid plans start at $1.65 per month, per Bitwarden’s official pricing page as of October 3, 2026.
| Plan | Price (as captured) | Notes |
|---|---|---|
| Free | Free | Basic password management |
| Premium | $1.65/mo | Billed annually at $19.80 |
| Families | $3.99/mo | Up to 6 users; billed annually at $47.88 |
| Teams | $4/user/mo | Billed annually |
| Enterprise | $6/user/mo | Billed annually |
Prices as captured from Bitwarden’s pricing page on October 3, 2026. Vendors change pricing often, so check the live page before you buy.
How we evaluated Bitwarden
Every fact on this page (pricing, plans, free-tier status and features) was captured from Bitwarden’s official pages (about, home, integrations, pricing) on October 3, 2026 and checked against that capture before publishing. Claims we could not confirm on those pages were removed rather than guessed. The verdict and the when-to-use guidance are Priya Nair’s editorial judgment. See our evaluation methodology for how we score tools.
Strengths & trade-offs
What earns the score
- The free tier is genuinely complete — unlimited passwords, unlimited devices, all clients, no time limit
- Open-source code means independent security researchers can and do audit the implementation
- Self-hosting option gives organizations full control over where vault data lives
Where it falls short
- UX is less polished than 1Password — the interface is functional but less intuitive, particularly on mobile
- No Travel Mode equivalent for border-crossing scenarios
- Autofill accuracy on mobile apps is lower than 1Password's, particularly on iOS
- TOTP code generation requires Premium ($1.65/month, billed annually at $19.80) — free users need a separate authenticator app
How it compares
| Tool | Score | Tier | From |
|---|---|---|---|
 1Password | 94 | Essential | $3.99/mo |
| Bitwarden | 90 | Essential | $1.65/mo |
 Dashlane | 69 | Situational | $8/mo |
Frequently asked questions
Is Bitwarden truly free?
Yes — Bitwarden's free tier includes unlimited passwords, unlimited devices, and all client apps (browser extensions, mobile, desktop, CLI) with no time limit. The only meaningful limitations are the absence of TOTP code generation (requires Premium at $1.65/month, billed annually at $19.80), no encrypted file attachments, and no Vault Health reports. For most individuals, the free tier is a complete solution.
Is Bitwarden secure?
Bitwarden uses AES-256 end-to-end encryption with a zero-knowledge model — your vault is encrypted on your device before syncing to Bitwarden's servers. The open-source code on GitHub allows ongoing community and independent researcher review, providing a level of transparency that closed-source competitors cannot offer.
How does Bitwarden compare to 1Password?
For security-conscious teams on a budget, or organizations requiring open-source auditability, Bitwarden is the stronger choice.
Can I self-host Bitwarden?
Yes — Bitwarden's server code is open-source and can be deployed on your own infrastructure using Docker. Bitwarden Unified is a single-container self-hosted deployment suitable for small teams. Vaultwarden is a popular third-party compatible server implementation written in Rust that is lighter-weight than official Bitwarden Server. Self-hosting gives complete control over where vault data lives, which is a compliance requirement for some regulated industries.
What is Bitwarden Send?
Bitwarden Send lets users share encrypted text or files with anyone via a time-limited, optionally password-protected link. The recipient doesn't need a Bitwarden account to access the shared content. Send links can be configured to expire after a set number of views or a time window. This is useful for securely sharing credentials, sensitive documents, or API keys with contractors or external collaborators without email.
Does Bitwarden support two-factor authentication?
Bitwarden supports multiple 2FA methods for logging into your vault: TOTP authenticator apps, hardware security keys (YubiKey, FIDO2), email verification, and Duo. For generating TOTP codes for your stored logins (authenticator app codes), this feature is available on the Premium plan at $1.65/month (billed annually at $19.80). Free users generate TOTP codes through a separate app like Google Authenticator or Authy.
How does Bitwarden handle team password sharing?
Bitwarden Organizations allow teams to create shared Collections — groups of vault items that multiple users can access with defined permissions (read-only, edit, or admin). Teams plans add admin policy controls, event logs, and SCIM directory sync.