Bitwarden

At a glance

Bitwarden is worth considering if you want one password vault across different devices without paying for basic storage and synchronization. The free plan includes unlimited passwords and devices, passkey management and limited sharing; paid plans add features such as an integrated authenticator and emergency access. Its encrypted-vault model also makes recovery preparation part of the decision. No account, autofill workflow or recovery process was tested for this assessment.

Good fit

Individuals moving beyond scattered saved logins, and households that want explicit sharing rather than passing around a password list. A login item holds a username, password and website URI; browser, desktop and mobile clients provide different ways to use that record. The official design describes encryption on the client before hosted synchronization. That is a documented mechanism, not a finding that every device, extension or user workflow is secure.

Consider something else when

You expect support to recover a vault without an available recovery method, or assume self-hosting unlocks every paid feature. Bitwarden says it cannot retrieve or reset the master password; access depends on methods already available to the account, such as an unlocked device, configured emergency access or eligible organization recovery. Self-hosted organization features still have plan and licensing requirements. Machine-secret automation is a separate Secrets Manager product, not an entitlement implied by a personal vault.

Start here

If you choose to create an account, select the intended server region and understand the recovery options before migrating a vault. The documented web-app path is New, then Login: add one synthetic item with a recognizable name and a test URI, save it, then check how the intended client finds and locks that item. Evaluate import and export with non-sensitive sample records before moving a full collection. These are proposed checks; no account was created, extension installed, credential entered or real password changed.

Cost and requirements

On 31 October 2026 the personal pricing page offered a free basic account, Premium at $19.80 annually and Families at $47.88 annually for six accounts, in USD before taxes. Integrated vault TOTP codes, attachments and emergency access are paid-plan distinctions; the separate free Authenticator app is a different product. Sharing with one other user uses a free organization, while larger sharing needs another plan. Self-hosting adds server operations and does not remove commercial entitlements. The client repository mixes GPL-licensed code with a separately licensed commercial directory.

Limits to know

Portability depends on the export selected. JSON includes data types omitted by CSV; the documented ZIP option includes attachments for individual vaults. No export includes trash or Sends, and an individual export does not include organization-owned items. Account-restricted encrypted exports depend on the originating account and encryption key; password-protected exports are the documented path for import into another account. The inspected client code derives a separate export key from that password. No backup restoration, encryption audit, autofill accuracy or cross-device synchronization was performed. Exported plaintext and provider administrative data are separate from the encrypted vault model.

Still unclear

• Autofill, import fidelity, cross-device behavior and recovery were not tested.
• A complete restore or migration of the intended item types and attachments was not demonstrated.