Bitwarden — the free, open-source password manager

Why it matters

The problem is not memory. It is reuse.

Almost nobody gets breached because their password was short. They get breached because the same password was used on a forum that leaked in 2016 and on the email account that can reset everything else. One dump, and the attacker just tries the pair everywhere.

A password manager fixes that with brute force: every site gets its own long random string, and you never see any of them. The only thing you memorise is one master password — which becomes, deliberately, the single point of failure you actually protect.

encryption: AES-256, salted hashing, PBKDF2 SHA-256 — end-to-end, zero-knowledge
source code: Open source, publicly auditable
third-party audits: Annual source review and penetration testing by outside security firms
devices on free tier: Unlimited
passkeys: Create, store and sync across mobile app and browser extensions
master password recovery: None. Lose it and the vault is unrecoverable — that is the trade-off of zero-knowledge

Capabilities

What you use week to week

gen

Password generator

Long random strings and unique usernames, including integration with email alias providers.

fill

Autofill

Fills credentials in apps and browsers so the manager is faster than typing, not slower.

key

Passkeys

Passwordless logins stored and synced alongside everything else.

2fa

Two-factor

Authenticator app, emailed codes, or FIDO2 hardware keys to protect the vault itself.

snd

Send

Transmit a secret to someone else end-to-end encrypted, with limited exposure.

sync

Everywhere

Mobile, desktop, browser extension and web vault, all on the same account.

Pricing

Where the free tier stops

Free

$0 forever

Unlimited passwords and passkeys
Unlimited devices, all platforms
Password generator and autofill
Bitwarden Send
No ads, no data selling

Premium

paid tier

Built-in authenticator (TOTP) codes
Hardware security key support
Vault health reports
Encrypted file attachments
Emergency access

# current prices and exact feature split live on the developer's site — check before subscribing.

Straight talk

It is not effortless

Good fit

You reuse passwords and know you do
You want something free that is not funded by your data
You care that the code is open and independently audited
You need it on several devices without a device limit

Be aware

The first migration takes an evening, not five minutes
Forgetting the master password means losing the vault — no reset
Autofill setup on Android and iOS needs a few permission steps
Some advanced conveniences sit behind the paid tier

Is the free version really unlimited?

Yes — unlimited passwords across unlimited devices, with no ads. Premium adds convenience and advanced features rather than lifting a cap.

What if Bitwarden is breached?

The vault is encrypted client-side, so the company never holds your key. An attacker taking server data would still face encrypted blobs — which is exactly why the master password's strength matters so much.

Can I self-host?

Yes. Self-hosting is supported, which is a large part of why the project has the reputation it does among technical users.

What happens if I forget the master password?

There is no recovery. That is a design decision, not an oversight. Write it down and store it physically somewhere safe before you commit.

One vault. Unlimited passwords, unlimited devices. Free.