Bitwarden is an open source password manager that stores passwords, passkeys, secure notes, and credentials in an encrypted vault with seamless sync across devices.

Is Bitwarden free to use?

Yes. Bitwarden offers a free personal plan with unlimited passwords and unlimited devices. Premium, Families, Teams, and Enterprise plans add advanced features.

Can I use Bitwarden on multiple devices?

Yes. Bitwarden supports synchronization across unlimited devices including phones, tablets, desktops, and browsers.

How is my Bitwarden data encrypted?

Bitwarden uses end-to-end zero-knowledge encryption with AES-256. Your master password derives the keys and Bitwarden never accesses unencrypted data.

What happens if I forget my master password?

Bitwarden cannot reset your master password due to zero-knowledge encryption. Set up emergency access or organization account recovery options.

Does Bitwarden support two-factor authentication?

Yes. Bitwarden supports TOTP authenticator apps, email, YubiKey, Duo, and FIDO2 WebAuthn hardware keys.

Can I self-host Bitwarden?

Yes. Organizations can deploy Bitwarden on their own servers using Docker for complete data sovereignty.

Is Bitwarden open source?

Yes. Bitwarden client and server code is open source under GPL and other licenses, publicly available for audit and contribution.

Does Bitwarden contain malware?

No. Bitwarden contains no malware, adware, or spyware. Antivirus flags are typically false positives from browser integration behaviors.

What are the macOS system requirements?

Bitwarden Desktop for macOS requires macOS 10.14 or later. The latest version is 2026.5.0.

Frequently Asked Questions

Get clear answers about Bitwarden password manager security, free and premium plans, self-hosting, encryption, and legal usage.

General Usage

Bitwarden is an open source password manager that stores your passwords, passkeys, secure notes, and other credentials in an encrypted vault. It works across browsers, desktop operating systems, and mobile devices with seamless synchronization.

Yes. Bitwarden offers a free personal plan with unlimited passwords, unlimited devices, and core security features. Premium ($1.65/month billed annually), Families ($3.99/month for up to 6 users), Teams ($4/user/month), and Enterprise ($6/user/month) plans add advanced capabilities.

Yes. Bitwarden supports synchronization across unlimited devices on all plans, including phones, tablets, desktops, and browsers. Changes made on one device sync to all others automatically.

Export your data from your current password manager or browser, then use the Import Data tool in Bitwarden. Supported formats include CSV exports from Chrome, Firefox, LastPass, 1Password, Dashlane, and KeePass. See our import guide for step-by-step instructions.

Security

Bitwarden uses end-to-end encryption with zero-knowledge architecture. Your vault is encrypted locally with AES-256 before being sent to the server. Your master password derives the encryption keys, and Bitwarden never has access to your unencrypted data.

Because of zero-knowledge encryption, Bitwarden cannot reset or recover your master password. If you forget it, your vault data cannot be decrypted. Set up emergency access with a trusted contact, or use your account recovery options if configured by your organization administrator.

Yes. Bitwarden supports multiple 2FA methods including authenticator apps (TOTP), email verification, YubiKey OTP, Duo, and FIDO2 WebAuthn hardware keys. Premium users also get an integrated authenticator for storing TOTP codes alongside passwords.

Yes. Bitwarden undergoes regular third-party security audits by independent research firms. Audit reports are published publicly. The open source codebase also allows continuous community review and security research.

This is a common false positive. Password managers interact with browsers and the clipboard, which triggers heuristic antivirus detections. Verify your download with SHA-256 checksums and see our antivirus guide for resolution steps.

Self-Hosting and Enterprise

Yes. Organizations can deploy Bitwarden on their own servers using Docker. Self-hosting provides complete data sovereignty and is available on Enterprise plans. See our self-hosting guide for setup details.

Yes. Teams and Enterprise plans include SSO integration with SAML 2.0 and OpenID Connect identity providers, plus SCIM automated user provisioning and deprovisioning for seamless directory synchronization.

Bitwarden Send is a feature that lets you securely share encrypted text and files with anyone, even if they do not have a Bitwarden account. Sends can be configured with expiration dates, access limits, and optional passwords.

Legal and Licensing

Yes. Bitwarden client applications and the core server are open source under the GNU General Public License and other permissive licenses. The source code is publicly available for review, audit, and contribution.

Yes. Bitwarden is legitimate security software used by millions of individuals and over 80,000 organizations worldwide. Use it to manage your own credentials in compliance with applicable laws and organizational policies. See our trust and security page for the full usage policy.

No. Bitwarden contains no malware, adware, spyware, or bundled unwanted software. The open source codebase can be independently verified, and the software is regularly audited by third-party security firms.

Bitwarden Desktop for macOS requires macOS 10.14 (Mojave) or later. The latest version is Bitwarden Desktop 2026.5.0. Download it from our download page.