About Bitwarden
Bitwarden is the one we would point most people to. The free tier has no cap on passwords or devices, the code is public and outside firms audit it regularly. The extension fills logins, saves new ones and generates passwords. Your vault is encrypted on your device before it syncs to Bitwarden's servers, and you can host the server yourself.
Transparency is its strength. The client apps, including the browser extension, are on GitHub. Its audit page lists penetration tests and code reviews by Cure53, among others, with the extension and autofill overlay covered in 2025 and the extension in 2023. It also holds SOC 2 Type 2 and ISO 27001 certifications and runs a bug bounty on HackerOne. The free plan adds a password generator, passkey support and encrypted export.
The interface is plainer than 1Password's, but it does the job in every browser. Free accounts can share items with one other person, enough for a couple but not for a family. Paid plans add an integrated authenticator, file attachments, emergency access, security reports and two-step login options such as hardware security keys and Duo. The same vault works in a web app, desktop and mobile apps and a command-line tool. Unless you need something specific, start here.
Pros and cons
- Free tier with unlimited passwords and devices
- Open source, with repeated third-party audits including the extension
- Extensions for Chrome, Firefox, Edge, Safari, Opera and more
- Self-hosting is available if you want to run your own server
- Interface is functional rather than polished
- Free sharing is limited to one other person
- Built-in 2FA codes and file attachments need a paid plan
Permissions
It asks for access to all websites so it can detect login forms and fill them, plus clipboard and tab access. Native messaging is optional and is used to connect to the desktop app, for example for biometric unlock.
