Bitwarden

Bitwarden is the password manager we recommend by default. It is open source, independently audited, has a genuinely usable free tier, and is optionally self-hostable. For most individuals, families and businesses that just want to stop reusing passwords, Bitwarden is a complete answer at a price that ranges from free to trivial.

Best for

• Individuals who want a serious password manager for $0.
• Privacy-minded users who want open-source, auditable code.
• Families and small teams who value low cost over polish.
• Organisations that want the option to self-host a vault.

Not ideal for

• Users who want the most polished UX — 1Password is still ahead.
• Households that prefer a heavier "shared vault" family experience.
• Enterprises that need integrated compliance dashboards out of the box (Keeper).

Independent verdict

Bitwarden is the best baseline password manager on the market. The free tier alone — unlimited passwords, unlimited devices, sync across all platforms — is materially better than most competitors' paid plans from a few years ago. Premium at $10/year adds TOTP generation, encrypted file attachments, emergency access and priority support; Families at $40/year for six users is the cheapest serious family plan in the category.

The trade-off is polish: the apps are functional rather than beautiful, and some flows (organisation admin, self-hosting setup) feel more "IT tool" than "consumer product". If UX is your top priority, 1Password is a fair upgrade. For every other criterion — cost, transparency, portability, longevity — Bitwarden wins.

Pricing model

Bitwarden Free covers the workflow most people actually need. Premium is $10/year for individuals and Families is $40/year for up to six people. Business tiers start at $4/user/month (Teams) and $6/user/month (Enterprise), with a separate Password Manager + Secrets Manager combined plan for engineering teams. All prices are billed annually; Bitwarden does not run heavy discount cycles because the base price is already low.

Security architecture

Bitwarden uses AES-256 encryption with keys derived from your master password via PBKDF2 or Argon2id (configurable). The vault is end-to-end encrypted — the server sees only ciphertext. All apps and the server are open source, and Bitwarden publishes third-party security audits (most recently by Cure53) on their trust page. You can self-host the entire stack on your own infrastructure if you want to remove Bitwarden from the trust chain entirely.

Key features

• Cross-platform apps (Windows, macOS, Linux, iOS, Android, browser extensions for every major browser).
• Password, note, card, identity and SSH key storage.
• Passkey support in all apps and browser extensions.
• Password sharing via Organisations (free plan supports 2-person sharing).
• Bitwarden Send for one-off encrypted file/text sharing.
• Bitwarden Secrets Manager for developer secrets (separate SKU).
• Self-hosting via Docker or the lightweight community-maintained Vaultwarden.

Real-world limits

The free tier's two-person sharing limit is the main "you'll probably upgrade" pressure. Emergency access, encrypted file attachments and integrated 2FA generation all require Premium — still just $10/year, but worth budgeting. The browser extension autofill is reliable on 95%+ of sites but can be finicky on poorly-built forms; 1Password's autofill is marginally smoother.

Alternatives

1Password is the natural upgrade if you value polish and family features. Proton Pass is the pick if you want native email aliases and are already in the Proton ecosystem. Keeper is stronger for regulated enterprises. NordPass is worth considering if you're already paying for NordVPN and want the bundle discount.

Bottom line

If you don't already have a password manager, install Bitwarden Free today. If you're paying $30+/year for a legacy tool that you barely use, switch to Bitwarden Premium and cut your bill to $10. The only reason to look elsewhere is a specific feature Bitwarden doesn't do well — polish, family sharing UX, native email aliases, or enterprise compliance dashboards.