
Bitwarden
bitwarden.comOpen-source password manager from Bitwarden, Inc. in California with a free plan, a $19.80-a-year Premium plan and an official self-hosted server.
- Owner
- Bitwarden, Inc.
- Based in
- United States
- Founded
- 2015
- Type
- Standalone app
- Free plan
- Yes
- Unlimited passwords on unlimited devices; sharing with one other user (free two-person organization)
- Premium, per year
- $19.80
- same price after year one
- Latest audit
- Cure53, 2025
- browser extension and autofill overlay, public report
- On record
- No incidents found
- in our research
- Audited by Cure53 in 2025, report public
- All apps are open source
- You can run your own server
- Has a free plan
How Bitwarden encrypts your vault
From Bitwarden's security documentation, next to the other 22. Bitwarden is outlined.
End-to-end encrypted
Encrypted on your device before it's stored (like 20 others)
Cipher: AES-256-CBC with HMAC-SHA256
Yes 21




















Optional 1

No 1

Website addresses encrypted
Encrypted with the rest of the item (like 18 others)
Encrypted 19


















Readable 1

Not documented 3



Item names encrypted
Titles and folder names are encrypted (like 16 others)
Item, folder and collection names are encrypted.
Encrypted 17
















Readable 1

Not documented 5





Memory-hard password hashing
Repeated hashing, but not memory-hard: cracking hardware has an easier time (like 10 others)
PBKDF2-HMAC-SHA256, 600,000 iterations (default); optional Argon2id, 32 MiB memory, 6 iterations, 4 parallelism
Memory-hard 3



Not memory-hard 11











Not documented 7






Doesn't apply 2


Extra secret key
Your master password is the only secret (like 13 others)
Yes 1

No 14













Not documented 4




Doesn't apply 4




What you'll pay
In USD, from Bitwarden's own pricing page, checked 2026-10-16.
Free plan
Yes
Unlimited passwords on unlimited devices; sharing with one other user (free two-person organization)
Premium
$19.80/yr
billed yearly
After the first year
Same price
$59.40 over 3 years
Families
$47.88/yr
up to 6 people
- Business:
- $4/user/mo
- Free trial:
- Unknown
- Money-back:
- Unknown
- About the renewal:
- No introductory discount; renews at the listed annual rate.
Audits
Independent security reviews, newest first.
2025 Cure53
Scope: browser extension and autofill overlay. Report is public.
Penetration test and dedicated audit. Bitwarden lists further 2025 assessments (Fracture Labs, Unit 42, ETH Zurich cryptography review) on the same page.
2025 ETH Zurich
Scope: cryptography analysis. Report is public.
Academic cryptographic analysis, listed by research among audits.
- Research summary (no single link)
- Open-source appsAll appsAll apps
- Open-source serverYesYes
- Run it yourselfOwn serverOwn server
- Bug bountyHackerOneHackerOne
Certifications: SOC 2 Type 2
Incidents
Breaches, stolen data and serious flaws on record.
Apps, browsers and passkeys
- WindowsYesYes
- macOSYesYes
- LinuxYesYes
- iPhoneYesYes
- AndroidYesYes
- Web vaultYesYes
- ChromeYesYes
- FirefoxYesYes
- SafariYesYes
- EdgeYesYes
- Saves and fills passkeysYesYes
- Unlock the vault with a passkeyYesYes
- Passkey import and export (CXP)YesYes
Sharing, recovery and extras
- Shared vaultsYesYes
- Share with non-usersYesYes
- Emergency accessYesYes
- 2FA codes built inYesYes
- Breach monitoringYesYes
- Email aliasesYesYes
- File attachments1–5 GB+ on Premium1–5 GB+ on Premium
- SSH keys and agentYesYes
- Command lineYesYes
- Encrypted exportYesYes
- Works offlineYesYes
- Authenticator-app 2FAYesYes
- Security key for 2FAYesYes
- Password health reportYesYes
- CSV exportYesYes
Where it's a pick
Best password manager for families
Families costs $47.88 a year for 6 people, with shared collections and emergency access. Every app and the server are open source, and the free plan already lets two people share.
Best free password manager
Unlimited passwords on unlimited devices for free, and you can share with one other person. Open-source apps, so the code can be checked.
Best open-source password manager
Open-source apps and server, and you can host the server yourself. Cure53 audited the browser extension and autofill in 2025.
Best LastPass alternative
No vault theft on record, open-source apps and server, and a free plan that covers unlimited devices. Supports Argon2id for the master password.
Best self-hosted password manager for teams
The same open-source server Bitwarden runs, packaged for self-hosting, with apps for every platform and passkey support.
All sources for Bitwarden (15)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- About BitwardenVendor, checked 2026-10-16
- Bitwarden security white paperVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Bitwarden help: vault dataVendor, checked 2026-10-16
- Bitwarden: encryption key derivationVendor, checked 2026-10-16
- Bitwarden on GitHubSource code, checked 2026-10-16
- Bitwarden compliance, audits and certificationsAudit, checked 2026-10-16
- Bitwarden pricingVendor, checked 2026-10-16
- Bitwarden help: password manager plansVendor, checked 2026-10-16
- Bitwarden help: product highlights and recent updatesVendor, checked 2026-10-16
- Bitwarden blog: passkey managementVendor, checked 2026-10-16
- Bitwarden help: SSH agentVendor, checked 2026-10-16
- Bitwarden help: export your dataVendor, checked 2026-10-16
- Bitwarden help: emergency accessVendor, checked 2026-10-16