Bitwarden
Open-source password manager with a free tier that a normal person can actually live on.
TL;DR verdict
The rare free tool that doesn't punish you for not paying. Bitwarden covers the essentials with fewer edges than most, and the paid upgrade is small enough to feel like a tip rather than a tax.
What we like
- Truly free tier that isn't crippled
- Open-source clients and server, auditable end-to-end
- Self-hostable via Vaultwarden if you want to leave the US entirely
- Premium is inexpensive and adds TOTP, emergency access, and file attachments
Where it falls short
- Desktop app still feels like an Electron wrapper from 2019
- Autofill on iOS is fine but not as smooth as 1Password's
- Some UI copy reads like it was translated by committee
Bitwarden is the password manager we recommend to people who don't want to think about password managers. It works, it costs nothing at the entry tier, and the code has been sitting in public view long enough that any obvious flaws would have been shaken out by now.
What it does well
The free tier is the story. You get unlimited passwords across unlimited devices, browser extensions for everything except Safari-on-anything-old, and mobile autofill that behaves. Nothing important is held back to sell you the paid plan. That is unusual, and it is why Bitwarden keeps ending up in our recommendations to people who have been putting off the whole password-manager conversation for a decade.
The clients are open-source, which matters less on a day-to-day basis than people think and more on the day something goes wrong. Independent audits have found real issues over the years, and they've been fixed in public. That's the correct pattern.
Self-hosting is the other reason to reach for Bitwarden. Vaultwarden, a compatible server written in Rust, runs comfortably on a Raspberry Pi and lets you keep your vault entirely off Bitwarden Inc.'s infrastructure. If you're in a threat model where "the vendor's US-based servers" is a load-bearing sentence, this is a real option in a way it isn't for the closed-source competitors.
Where it disappoints
The desktop app is functional but ugly, and the design language across the mobile and web clients is inconsistent in small ways that add up. Search inside the vault is fast but the results view is cramped. The password generator has more toggles than it needs. None of this is a reason to avoid it. It just means that if you spend all day inside your vault, you may find yourself missing the polish of the paid alternatives.
Send, the built-in file and text sharing feature, is fine for what it is, but we would not lean on it for anything sensitive that couldn't also be sent through a proper secure channel.
Who it's for
Anyone who wants a working vault today and doesn't want to think about it again. Journalists and activists get the added benefit of a self-hostable path. Households can start on the free plan and move to Families later without any migration pain. Corporate users have a Teams tier that is quietly one of the best-value options in that segment, but we haven't reviewed it here.
If you're leaving LastPass or moving off a browser's built-in manager, this is the softest landing available.
Frequently asked
Is Bitwarden safe to use for free?
Yes. The free tier uses the same encryption as the paid one. You lose extras like TOTP storage and encrypted file attachments, but the vault itself is not weaker.
What is Vaultwarden and should I self-host it?
Vaultwarden is an unofficial, lightweight server that speaks the Bitwarden protocol. It's a reasonable choice if you already run a home server. If that sentence made you tired, stay on the hosted version.
Can I share passwords with my family?
Yes, via the Families plan. Free accounts can share a single "collection" between two people, which is enough for a couple but not a household.