Bitwarden Review

Bitwarden is the password manager security leads recommend when the alternative is a spreadsheet, a browser, or a premium vault the finance team will question. The buying question is whether Teams is enough, or whether SSO and self-hosting push you onto Enterprise and a higher seat.

This review prices every Bitwarden tier, then sets it next to 1Password, Proton Pass, Dashlane, NordPass, and Keeper.

Toolradar data: the September 2026 password-manager ranking evaluated 37 products, and Bitwarden is one of them.

Our cybersecurity statistics counted 651 live security tools in that directory on August 18, 2026.

How we compared: vendor pricing and product pages read on September 23, 2026, with Keeper's business rates taken from Keeper's own July 2026 plan guide. No vendor paid for a place in this review.

Bitwarden is a password manager from Bitwarden, Inc., founded in 2016 and headquartered in Santa Barbara, California. The company says it serves more than 15 million users and over 80,000 businesses, which is what you cite when someone asks if the vendor will last.

The product stores logins, passkeys, notes, cards, and identities in a zero-knowledge vault that syncs across browser extensions, desktop apps, and phones.

Vault data is encrypted with AES-CBC 256-bit, and the key is derived with PBKDF2 SHA-256 or Argon2, salted with the account email on the device before anything is sent.

Bitwarden publishes the client and server source on GitHub and invites outside review, so a team that will not trust a closed vault can read the code.

On its compliance page it lists ISO 27001, SOC 2, SOC 3, HIPAA, and GDPR, the claims a questionnaire will ask you to attach. They are Bitwarden's own statements, not an audit we reran.

Every free account includes a password generator, passkeys, email-alias integration, encrypted export, and Bitwarden Send, so daily use does not require a card. Premium adds the integrated authenticator, health reports, emergency access, and attachments.

Teams adds organization ownership, event logs, directory sync, and SCIM for joiner and leaver work. Enterprise adds passwordless SSO, enterprise policies, Access Intelligence, and self-hosting, so an ordinary control can move you up a tier.

Secrets Manager is a separate product for pipeline secrets and machine accounts, covered in our secrets management tools guide.

A personal setup is an account, a master password, and the extension. The extension offers to save and fill logins, and the generator can replace a reused password while you are already on the site, which is when a reused password gets replaced.

Passkeys can live in the same vault, so a phishing page that asks for a password is no longer the only way in. Every plan includes built-in phishing protection, a layer on the habits in how to prevent phishing attacks, not a substitute for them.

Day to day, the free vault is a complete password store, so a solo user with a separate authenticator can stop before paying. It does not grade the vault or generate TOTP codes for other sites, and those jobs sit on Premium with emergency access and file attachments.

If your standard is a separate authenticator app, the free plan keeps the password manager and the second factor apart. Premium collapses them, which is faster and slightly worse isolation if the vault itself is what gets phished.

For a company, an admin creates an organization, invites seats, and shares items through collections. Teams can sync a directory and provision with SCIM, and event logs show who touched an item after someone leaves.

Account recovery lets an admin start the process without Bitwarden holding the vault key, on the plans that include it. A lockout does not become a request for Bitwarden to open the vault.

Bitwarden prints list prices, so a budget meeting can cite a number instead of waiting on sales, and the free plan stays free.

Premium is $1.65 per month for one account, the personal price for health reports, emergency access, and attachments. Families is $3.99 per month, $47.88 a year, for up to six people, with Premium features on each account.

Teams is $4 per user per month and Enterprise is $6 per user per month, both billed annually, so you budget the monthly figure and pay once a year.

The January 21, 2026 plan update is what set the current personal rates. Bitwarden told existing Premium subscribers they would get a one-time 25% discount on the next renewal, then the standard rate.

If that renewal has already passed, budget the full price, because the discount covered one renewal and then ended.

Attachment storage on Premium is 5 GB for the person, and Families adds the same allotment for shared items. Extra storage is an add-on whose price is not on the plan card, so ask before you store files.

Secrets Manager is a second contract on top of the password seat. Secrets Manager Teams is $6.00 per user per month and Secrets Manager Enterprise is $12.00 per user per month.

Teams includes 20 machine accounts and Enterprise includes 50, then $1 for each extra machine account, and a fleet of scripts can outrun the human seats.

The table below is the same check against 1Password, Dashlane, Proton Pass, NordPass, and Keeper. 1Password's low personal rate is a first-year promo for new customers on 1Password.com, with a trial and no free plan, so budget the renewal year.

Extra Starter Pack seats are $4.99 per seat per month, up to 10 more, so growing past the pack has its own price.

Proton's Pass Plus annual figure is the November 7, 2024 public price, so confirm checkout before you treat it as current. NordPass quotes in euros, and Keeper's business rates come from its own plan guide, so check currency and freshness before calling either one cheaper.

Bitwarden fits a security team that wants the vault decision to be boring. Individuals who need passwords and passkeys on every device can stay free until they want a report or emergency access. A household of up to six people is the Families plan, one subscription instead of a renewal per person.

A company that can live with directory sync, SCIM, and event logs, and with Bitwarden hosting the server, is a Teams buyer.

Move to Enterprise for passwordless SSO, enterprise policies, account recovery, Access Intelligence, a sponsored Families plan for staff, or a server you run yourself. That is also the plan when residency rules out a vendor-hosted vault.

Skip Bitwarden when the client, the jurisdiction, or the job does not match. If adoption depends on a cleaner client than your users will tolerate, pay for 1Password and read the wider password manager comparison.

If the requirement is Swiss jurisdiction and hide-my-email aliases, Proton Pass is the closer fit, especially for people already in that ecosystem.

If the only goal is dark-web alerting, start with dark web monitoring tools rather than buying a vault for one report.

Teams that need SOC 2 evidence around the program, not only the vendor's certificate, still have to run the control themselves: see SOC 2 compliance automation.