Bitwarden icon

Bitwarden

An open-source password manager from Bitwarden Inc. The free plan covers unlimited passwords and devices.

Reviewed by Xplorekit's independent developer · Last checked · How we choose

Add to Chrome Free plan, optional Premium · Chrome Web Store

Why it's a strong pick

Bitwarden's free plan covers unlimited passwords on unlimited devices, and its client code is public on GitHub. Bitwarden also publishes third-party audit reports. The trade-off: some extras are Premium-only, including authenticator (TOTP) codes, emergency access and encrypted file attachments. You also need a Bitwarden account, which is free.

What it does

Bitwarden creates and saves unique passwords in an end-to-end encrypted vault, then fills them in when you sign in. The vault syncs across your devices. Bitwarden says vault data is fully encrypted and/or hashed before it leaves your device. You can use Bitwarden's hosted service or host your own server.

Key features

  • Encrypted vault. Passwords, cards and notes are stored in an end-to-end encrypted vault.
  • Password generator. Make a unique password for every new account.
  • Free plan. Unlimited passwords and unlimited devices, per Bitwarden's plans page.
  • Open-source clients. The code is on GitHub at github.com/bitwarden.
  • Published audits. Bitwarden says it runs annual third-party audits and penetration tests.
  • Several browsers. Bitwarden lists Chrome, Brave, Vivaldi, Opera and others.

Who it's for

Bitwarden is a good fit if you want unlimited logins and devices without paying, and you like being able to read the code. If you need TOTP codes, emergency access or file attachments, those are Premium, so check the current plans on Bitwarden's site. If you want a free plan that also includes aliases, see Proton Pass. If you want to keep your vault in a local file, see KeePassXC-Browser.

Is Bitwarden open source?

Mostly yes. The client code, including the browser extension, is public on GitHub, and the main clients repository carries a GPL-3.0 licence file. Some code in that repository sits under a separate Bitwarden licence, so we do not say everything is GPL. Bitwarden says all its products' source code is on GitHub.

Who audits Bitwarden?

Bitwarden says it has annual third-party audits and penetration tests, and names Cure53 and Insight Risk Consulting. It says 2025 audits covered the browser extension and the autofill overlay, and that reports are public on its compliance page. It also says ETH Zurich reviewed its cryptography. Read the reports yourself.

What does the free plan include, and what needs Premium?

The free plan covers unlimited passwords and unlimited devices. Bitwarden's plans page says generating TOTP codes, emergency access and file attachments need Premium. You need a Bitwarden account either way. We do not list prices because they change, so check the current plans before you upgrade.

What permissions does Bitwarden ask for?

Bitwarden's open-source manifest lists activeTab, alarms, clipboardRead, clipboardWrite, contextMenus, idle, offscreen, scripting, sidePanel, storage, tabs, unlimitedStorage, webNavigation, webRequest, webRequestAuthProvider and notifications, plus access to http and https sites. nativeMessaging and privacy are optional. Check the install prompt for the current list.

FAQ

Does Bitwarden work with Manifest V3? Yes. Bitwarden's blog says the Chrome extension moved to Manifest V3 in a gradual rollout from May 2024. The open-source manifest is Manifest V3 and sets a minimum Chrome version, so check it if you run an older browser.

Can I self-host it? Yes. Bitwarden's plans page says self-hosting is possible.

Who makes it? Bitwarden Inc., named as author in the extension's manifest.

Good to know

The extension asks for broad site access, which autofill needs, so read the install prompt. Turn on two-factor authentication for your Bitwarden account and keep a recovery option, so a lost device or forgotten master password does not lock you out.

Other password managers to compare

Bitwarden is one of 10 picks in our Password Managers guide, which compares them side by side and explains how to choose. The other picks:

  • 1Password: A password manager from AgileBits Inc. (1Password). It has a free trial but no free plan.
  • Keeper: A zero-knowledge password manager from Keeper Security. The extension needs a paid plan or the free trial.
  • NordPass: A password manager from Nord Security. The free plan covers one active device; Premium adds more.
  • Proton Pass: An open-source, end-to-end encrypted password manager from the Proton Mail team. It has a free plan.
  • RoboForm: A password manager from Siber Systems, Inc. The free plan is for one device with no sync.
  • KeePassXC-Browser: An open-source extension that fills in logins from your KeePassXC desktop app.
  • authenticator.sh 2FA: An open-source authenticator that makes your 2FA codes inside Chrome, with no host permissions.
  • Passbolt: The Chrome extension for Passbolt, an open-source password manager built for teams.
  • Psono: An open-source password manager client that needs a Psono server, hosted or your own.

Compare: Passbolt vs Psono (two team-focused managers)

Also see: Best Chrome extensions for privacy

This is a third-party extension, not built or maintained by Xplorekit. We link to the official Chrome Web Store listing — install and permissions are entirely between you and the extension's own publisher.