Bitwarden is a freemium open-source password management service that stores sensitive information such as website credentials in an encrypted vault. The platform offers a variety of client applications including a web interface, desktop applications, browser extensions, mobile apps, and a command-line interface. Bitwarden offers a free US or European cloud-hosted service as well as the ability to self-host.
Desktop applications are available for Windows, MacOS, and Linux. Browser extensions include Chrome, Firefox, Safari, Edge, Opera, Vivaldi, Arc, Brave and Tor. Mobile apps for Android, iPhone, and iPad are available.
Client functionalities include 2FA login, passwordless login, biometric unlock, random password generator, password strength testing tool, login/form/app autofill, syncing across unlimited platforms and devices, storing unlimited number of items, sharing credentials, and storing a variety of information including credit cards.
Features
Overall security
Open-source codebase
Zero-knowledge encryption, i.e., the company can't see the vault contents
End-to-end encryption of the stored vault data
Uses AES-CBC 256-bit to encrypt vault data, and PBKDF2 SHA-256 / Argon2id to derive user's encryption key from the entered password. Third-party independent application/code-library/network-infrastructure audits and bug bounty program
Vault storage
Cloud synchronization (Microsoft Azure)with free version being able to sync across unlimited platforms and devices Can choose either US cloud or European cloud, and migrate between them Can self-host the Bitwarden server on-premises, or with services such as DigitalOcean
Availability
Variety of client applications including a web interface, desktop applications, browser extensions, mobile apps, and a command-line interface. Desktop applications are available for Windows, MacOS, and Linux Browser extensions are available for Chrome, Firefox, Safari, Edge, Opera, Vivaldi, Brave and Tor. Mobile apps are available for Android, iPhone, and iPad 50+ languages and dialects supported, although not all available for all client apps Free, premium, 6-user account family plans, and business plans are available
Items
Items types such as logins, secure notes, credit cards, and identitieswhich free version can store in an unlimited number. Items can be organized into folders Customizable fields for login/auto-fill 1GB encrypted file attachments and sharing for paid versions
TOTP / Authenticator function
TOTP key storage for free version, plus code generator and automatic fill-in for paid customers
Imports/Exports
Imports from over 50 password managers including Dashlane, Keeper and RoboForm
Exports into JSON, encrypted JSON, or CSV
Access
Biometric unlock via Touch ID, Face ID, Windows Hello, or Android Login with Biometrics Vault login by Two-factor authentication via FIDO2 WebAuthn, authenticator apps, and email in free version, with the addition of Duo and YubiKey OTP for paid customers, with recovery code to bypass the step if a 2FA device is unavailable. Login with single sign-on Passwordless login via notification approval on a mobile/desktop
Sharing
Secure sharing of any texts (free version) including credentials, and files (paid versions) with others via "Send", i.e. sending a URL, via any means, that retrieves the sent information that can have expiration/deletion time, maximum access limit, and password Use an organization (such as family) and permission-based collections to securely share vault entries: 2 users + 2 collections for free and premium versions, and 6 users + unlimited collections for family plan. Designation of Bitwarden users as emergency contacts (for paid versions) that can request for account access in an emergency
Tools
Password strength testing tool
Through Have I Been Pwned?, data breach (available in the free version) and Exposed passwords reports Exposed, Reused, Weak passwords reports for paid customers
Others
Password history, to see the previous passwords for a login
Autofill credentials/customizable fields into websites and other applications
Configurable username generator
Configurable password generator
Switch between Bitwarden accounts on a website
Integration with email alias/forwarding services including SimpleLogin, AnonAddy, Firefox Relay, Fastmail, and DuckDuckGo Bitwarden is compliant with HIPAA, GDPR, CCPA, SOC 2, SOC 3, and the EU-US and Swiss–US Privacy Shield frameworks.