Bitwarden
bitwarden.com Self-HostedFully-featured, open source password manager with cloud-sync. Bitwarden is easy-to-use with a clean UI and client apps for desktop, web and mobile. See also Vaultwarden, a self-hosted, Rust implementation of the Bitwarden server and compatible with upstream Bitwarden clients.
- Homepage: bitwarden.com
- GitHub: github.com/bitwarden/server
- Privacy: tosdr.org/en/service/1348
- iOS App: apps.apple.com/us/app/bitwarden-password-manager/id1137397744
- Android App: https://play.google.com/store/apps/details?id=com.x8bit.bitwarden
- Subreddit: r/Bitwarden
- Web info: web-check.xyz/results/bitwarden.com
Bitwarden Privacy Policy
Privacy Policy Summary
- You have the right to leave this service at any time
- The service does not guarantee accuracy or reliability of the information provided
- The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
- The service provides two factor authentification for your account
- You are responsible for maintaining the security of your account and for the activities on your account
- They may stop providing the service at any time
- Users should revisit the terms periodically, although in case of material changes, the service will notify
- This service does not guarantee that it or the products obtained through it meet the users' expectations or requirements
- The service does not guarantee that software errors will be corrected
- The service can suspend or terminate your access to all or any part of the Website and refuse service to anyone for any reason at any time
- This service throttles your use
- This service prohibits users from attempting to gain unauthorized access to other computer systems
- This service gives your personal data to third parties involved in its operation
- The court of law governing the terms is in California, USA
- You are tracked via web beacons, tracking pixels, browser fingerprinting, and/or device fingerprinting
- Third-party cookies are used for statistics
- Some personal data may be kept for business interests or legal obligations
- Information is provided about what kind of information they collect
- Information is provided about how they collect personal data
- Information is provided about how your personal data is used
- Extra data may be collected about you through promotions
- You agree to defend, indemnify, and hold the service harmless in case of a claim related to your use of the service
- Users are responsible for any risks, damages, or losses they may incur by downloading materials
- The service is provided 'as is' and to be used at the users' sole risk
- This service is only available to users of age 13 and up
- Features of the website are made available under a free software license (AGPL) v3.0
- The terms for this service are easy to read
- You authorise the service to charge a credit card supplied on re-occurring basis
- You are entitled to a refund if certain thresholds or standards are not met by the service
- Promises will be kept after a merger or acquisition
- When the service wants to make a material change to its terms, you are notified at least 30 days in advance
- First-party cookies are used
Score
Documents
- Terms of serviceCreated 17 Jan 19, Last modified 5 years ago
- Privacy PolicyCreated 17 Jan 19, Last modified 5 years ago
Domains Covered by Policy
- bitwarden.com
- bitwarden.eu
- passwordless.dev
About the Data
This data is kindly provided by tosdr.org. Read full report at: #1348
Bitwarden Source Code
Author
Description
Bitwarden infrastructure/backend (API, database, Docker, etc).
Homepage
https://bitwarden.comLicense
NOASSERTION
Created
23 Nov 15
Last Updated
26 Feb 26
Latest version
Primary Language
C#
Size
45,873 KB
Stars
18,136
Forks
1,543
Watchers
18,136
Language Usage
Star History
Top Contributors
-
@kspearrin (2572)
-
@renovate[bot] (349)
-
@eliykat (265)
-
@amorask-bitwarden (214)
-
@Hinton (184)
-
@r-tome (180)
-
@justindbaur (173)
-
@cscharf (148)
-
@withinfocus (133)
-
@MGibson1 (130)
-
@trmartin4 (124)
-
@cyprain-okeke (120)
-
@vgrassia (119)
-
@cturnbull-bitwarden (96)
-
@vincentsalucci (90)
-
@joseph-flinn (85)
-
@Thomas-Avery (82)
-
@jrmccannon (70)
-
@ike-kottlowski (68)
-
@github-actions[bot] (59)
-
@actions-user (51)
-
@shane-melton (49)
-
@gbubemismith (49)
-
@mimartin12 (49)
-
@brant-livefront (48)
-
@JimmyVo16 (48)
-
@djsmith85 (48)
-
@BTreston (47)
-
@addisonbeck (45)
-
@michalchecinski (41)
Recent Commits
-
Marko Lahma (26 Feb 26)
[PM-11612] Use SchedulerBuilder to configure Quartz (#4729) * Use SchedulerBuilder t configure Quartz * Add null check for instanceName to prevent an unlikely null ref * Fix startup by assigning the jobFactory manually --------- Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com> Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
-
mpbw2 (25 Feb 26)
add pm-27581-device-auth-key feature flag (#7081)
-
Dave (25 Feb 26)
feat(change-email) [PM-30811]: Add feature flag. (#6969)
-
Kyle Denney (25 Feb 26)
[PM-30275] stripe coupon deleted handler (#7073) * [PM-30275] stripe coupon deleted handler * will commit this in a different PR
-
Alex Morask (25 Feb 26)
fix(billing): return null subscription when resource_missing (#7068)
-
Mick Letofsky (25 Feb 26)
Fix out of date seed endpoint example (#7075)
-
Mick Letofsky (25 Feb 26)
Incrementing our sdk-internal references to their latest released versions (#7074)
-
Mick Letofsky (25 Feb 26)
Refactoring legacy Seeder Recipes (#7069)
-
Thomas Rittson (25 Feb 26)
[PM-32131] Add UseMyItems organization ability (#7014) Purpose: UseMyItems is a new organization ability / plan flag which is automatically enabled where UsePolicies is enabled, but can be selectively disabled to disable My Items creation when the Organization Data Ownership policy is turned on. - new organization table column with all sprocs and views updated - data migration to enable the feature for all organizations that already use policies (replicating existing behaviour) - data and api models updated - added to organization license file so it can be preserved in self-hosted instances - note that we don't have a plan feature defined for this yet, so it is set based on UsePolicies to match the migration logic. Billing Team have a ticket to add this
-
Thomas Avery (24 Feb 26)
[PM-15150] Remove ssh feature flags (#7061)
-
Mick Letofsky (24 Feb 26)
Seeder simplifying and extending seeds (#7065)
-
aj-bw (24 Feb 26)
restore draft true (#7044)
-
Rui Tomé (24 Feb 26)
[PM-21179] Add interface to check if user is enrolled in account recovery (#6993) * Add validation for reset password key and account recovery enrollment in OrganizationUser * Update admin approval logic to check account recovery enrollment and add tests for reset password key validation * Enhance UserService validation to include account recovery enrollment and add unit test for empty or whitespace reset password key handling * Refactor OrganizationUserUserDetailsQuery to validate reset password keys and add unit tests for filtering out invalid keys * Update AdminRecoverAccountCommand to validate account recovery enrollment and adjust tests for whitespace reset password keys * Enhance OrganizationUserRotationValidator to validate reset password keys, including filtering out whitespace-only keys, and add corresponding unit tests for validation logic. * Refactor OrganizationUserUserDetailsQueryTests to remove unnecessary whitespace-only test cases for account recovery key validation. * Refactor MemberResponseModel to use OrganizationUser's validation method for ResetPasswordEnrolled status and update corresponding unit test for clarity. * Refactor OrganizationUsersController and response models to utilize OrganizationUser's validation method for ResetPasswordKey, ensuring consistent validation across the application. Add unit tests for OrganizationUser to verify key validation logic. * Update OrganizationUserRotationValidator to handle null reset password keys and adjust tests for client-side bug. Add comments for future migration after resolving PM-31001. * Fix whitespace issue in UserServiceTests.cs by removing BOM character from the file header.
-
Rui Tomé (24 Feb 26)
[PM-30327] Fix SingleOrg policy not revoking non-compliant users (#7001)
-
Mick Letofsky (24 Feb 26)
Seeder/resolve owner roster quirk (#7059)
-
Vijay Oommen (23 Feb 26)
PM-31725 updated properties to match the pull in public/events (#6959)
-
renovate[bot] (23 Feb 26)
[deps]: Update webpack-cli to v6 (#6933) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Dave <3836813+enmande@users.noreply.github.com>
-
sven-bitwarden (23 Feb 26)
[PM-4142] Clean Up Pre-Tokenable Token Validation (#6972) * Remove old pre-tokenable code * Clean up dead code * Remove unused imports
-
Kyle Denney (23 Feb 26)
[PM-30109] edit discounts in bitwarden portal (#7032) * [PM-30109] edit discounts in bitwarden portal * forgot model error * dotnet format * pr feedback * pr feedback
-
Patrick-Pimentel-Bitwarden (23 Feb 26)
feat(auth-validator): [Auth/PM-22975] Client Version Validator (#6588) * feat(auth-validator): [PM-22975] Client Version Validator - Implementation. * test(auth-validator): [PM-22975] Client Version Validator - Added tests.
-
Dave (23 Feb 26)
feat(docker-compose) [PM-30609]: Add Redis to cloud profile. (#6816)
-
Mick Letofsky (23 Feb 26)
Resolving bug with Mangler and Organizations (#7057)
-
Github Actions (23 Feb 26)
Bumped version to 2026.2.1
-
Mick Letofsky (23 Feb 26)
Bring our QA Setup data files into the Seeder as presets (#7046) * Importing test fixtures from test repo into the Seeder * Needed to ensure that we assigned permission to collections; not just made them.
-
sven-bitwarden (20 Feb 26)
Validate loaded user's org matches pass-in organization when resetting password (#7019)
-
Jonathan Prusik (20 Feb 26)
add feature flag fill-assist-targeting-rules (#7051)
-
cd-bitwarden (20 Feb 26)
[PM-29660] allowing null for continuationToken (#6753) * allowing null for continuationToken * Normalizing empty string to null on pagedlistresponsemodel
-
Maciej Zieniuk (20 Feb 26)
[PM-31052][PM-32469] Add V2UpgradeToken for key rotation without logout (#6995) * User V2UpgradeToken for key rotation without logout * reset old v2 upgrade token on manual key rotation * sql migration fix * missing table column * missing view update * tests for V2UpgradeToken clearing on manual key rotation * V2 to V2 rotation causes logout. Updated wrapped key 1 to be a valid V2 encrypted string in tests. * integration tests failures - increase assert recent for date time type from 2 to 5 seconds (usually for UpdatedAt assertions) * repository test coverage * migration script update * new EF migration scripts * broken EF migration scripts fixed * refresh views due to User table alternation
-
John Harrington (20 Feb 26)
gate add/edit endpoints behind premium membership and add test coverage (#7043)
-
Jared McCannon (20 Feb 26)
[PM-27705] - Notify Admins/Owners/Managers Auto Confirm Enabled (#6938) * Adding email for sending to owners, admins, and managers to notify that auto confirm feature has been enabled from admin portal
Bitwarden Website
Website
The password manager trusted by millions | Bitwarden
Bitwarden makes it easy for businesses and individuals to securely generate, store, and share passwords from any location, browser, or device. Create your free Bitwarden account today.
Redirects
Does not redirect
Security Checks
All 66 security checks passed
Server Details
- IP Address 199.232.194.22
- Location San Francisco, California, United States of America, NA
- ISP Fastly Inc.
- ASN AS54113
Associated Countries
-
US
Safety Score
Website marked as safe
100%
Blacklist Check
bitwarden.com was found on 0 blacklists
- ThreatLog
- OpenPhish
- PhishTank
- Phishing.Database
- PhishStats
- URLhaus
- RPiList Not Serious
- AntiSocial Blacklist
- PhishFeed
- NABP Not Recommended Sites
- Spam404
- CRDF
- Artists Against 419
- CERT Polska
- PetScams
- Suspicious Hosting IP
- Phishunt
- CoinBlockerLists
- MetaMask EthPhishing
- EtherScamDB
- EtherAddressLookup
- ViriBack C2 Tracker
- Bambenek Consulting
- Badbitcoin
- SecureReload Phishing List
- Fake Website Buster
- TweetFeed
- CryptoScamDB
- StopGunScams
- ThreatFox
- PhishFort
Website Preview
Bitwarden Android App
Update Info
- App Bitwarden Password Manager
- Creation Date 09 Aug 18
- Last Updated 19 Jul 24
- Current Version 1.17.1
- Creator 8bit Solutions LLC
- Downloads 100,000+ downloads
Trackers
- Google Analytics
- Google Firebase Analytics
- HockeyApp
- Google Tag Manager
Permissions
- Access Network State
- Access Wifi State
- Camera
- Internet
- Nfc
- Request Install Packages
- Use Fingerprint
- Wake Lock
- Write External Storage
- Receive
- Write Use App Feature Survey
Bitwarden iOS App
App Info
Bitwarden Password Manager
Recognized as best password manager by PCMag, The Verge, CNET, G2, and more! SECURE YOUR DIGITAL LIFE Secure your digital life and protect against data breaches by generating and saving unique, strong passwords for every account. Maintain everything in an end-to-end encrypted password vault that only you can access. ACCESS YOUR DATA, ANYWHERE, ANYTIME, ON ANY DEVICE Easily manage, store, secure, and share unlimited passwords across unlimited devices without restrictions. EVERYONE SHOULD HAVE THE TOOLS TO STAY SAFE ONLINE Utilize Bitwarden for free with no ads and or selling data. Bitwarden believes everyone should have the ability to stay safe online. Premium plans offer access to advanced features. EMPOWER YOUR TEAMS WITH BITWARDEN Plans for Teams and Enterprise come with professional business features. Some examples include SSO integration, self-hosting, directory integration and SCIM provisioning, global policies, API access, event logs, and more. Use Bitwarden to secure your workforce and share sensitive information with colleagues. More reasons to choose Bitwarden: World-Class Encryption Passwords are protected with advanced end-to-end encryption (AES-256 bit, salted hashtag, and PBKDF2 SHA-256) so your data stays secure and private. 3rd-party Audits Bitwarden regularly conducts comprehensive third-party security audits with notable security firms. These annual audits include source code assessments and penetration testing across Bitwarden IPs, servers, and web applications. Advanced 2FA Secure your login with a third-party authenticator, emailed codes, or FIDO2 WebAuthn credentials such as a hardware security key or passkey. Bitwarden Send Transmit data directly to others while maintaining end-to-end encrypted security and limiting exposure. Built-in Generator Create long, complex, and distinct passwords and unique usernames for every site you visit. Integrate with email alias providers for additional privacy. Global Translations Bitwarden translations exist for more than 50 languages. Cross-Platform Applications Secure and share sensitive data within your Bitwarden Vault from any browser, mobile device, or desktop OS, and more.
Rating
Version Info
- Current Version 2024.2.1
- Last Updated 21 Mar 24
- First Released 02 Sept 16
- Minimum iOS Version 11.0
- Device Models Supported 94
App Details
- IPA Size 171.79 Mb
- Price Free (USD)
- Age Advisory 4+
- Supported Languages 32
- Developer Bitwarden Inc
- Bundle ID com.8bit.bitwarden
Screenshots
Bitwarden Docker
Container Info
bitwardenrs
This is a Bitwarden server API implementation written in Rust compatible with upstream Bitwarden clients*, perfect for self-hosted deployment where running the official resource-heavy service might not be ideal..
DockerHub Metrics
- Pull Count None
- Stars None
- Date Created Invalid Date
- Last Updated just now
View on DockerHub
/Run Command
docker run -d \ -p :80/tcp \ -v /portainer/Files/AppData/Config/Bitwarden-rs:/config \ --restart=unless-stopped \ bitwardenrs/server:latest
Compose File
version: 3.8
services:
bitwarden-rs:
image: bitwardenrs/server:latest
ports:
- :80:tcp
environment:
volumes:
- /portainer/Files/AppData/Config/Bitwarden-rs:/config
restart: unless-stopped Port List
- :80/tcp
Volume Mounting
- /portainer/Files/AppData/Config/Bitwarden-rs /config
Bitwarden Socials
Bitwarden Reviews
More Password Managers
-
Hardened, secure and offline password manager. Does not have cloud-sync baked in, deemed to be gold standard for secure password managers. KeePass clients: Strongbox (Mac & iOS), KeePassDX (Android), KeeWeb (Web-based/ self-hosted), KeePassXC (Windows, Mac & Linux), see more KeePass clients and extensions at awesome-keepass by @lgg.
-
LessPass is a little different, since it generates your passwords using a hash of the website name, your username and a single main-passphrase that you reuse. It omits the need for you to ever need to store or sync your passwords. They have apps for all the common platforms and a CLI, but you can also self-host it.
-
A modern, open source password manager for individuals and teams. Beautiful, intuitive and dead simple to use. Apps available for all platforms and you can self-host it as well.
-
From the creators of ProtonMail, ProtonPass is a new addition to their suite of services. They have a full collection of user-friendly native mobile and desktop apps. ProtonPass is one of the few "trustworthy" providers that also offers a free plan.
-
The Standard Unix Password Manager
About the Data: Bitwarden
API
You can access Bitwarden's data programmatically via our API.
Simply make a GET request to:
https://api.awesome-privacy.xyz/essentials/password-managers/bitwarden The REST API is free, no-auth and CORS-enabled. To learn more, view the Swagger Docs or read the API Usage Guide.
About the Data
Beyond the user-submitted YAML you see above, we also augment each listing with additional data dynamically fetched from several sources. To learn more about where the rest of data included in this page comes from, and how it is computed, see the About the Data section of our About page.
Share Bitwarden
Help your friends compare Password Managers, and pick privacy-respecting software and services.
Share Bitwarden and Awesome Privacy with your network!