Windows · Privacy & Encryption
Bitwarden for Windows
Open-source password manager with end-to-end encrypted cloud sync, a genuinely usable free tier, and optional self-hosting.
Updated July 15, 2026 · Reviewed by SoftNexi Safety Desk, Download sourcing and safety review
Overview
Bitwarden is the hosted counterpart to a local manager like KeePassXC. Your vault syncs across devices through Bitwarden's servers, encrypted end to end so the service cannot read it.
The free tier is unusually complete: unlimited passwords, unlimited devices, and password sharing with one other person. Paid tiers add features such as file attachments, emergency access, and advanced two-factor options.
Because the clients and server are open source, organizations can also self-host, which is a meaningful option if policy requires data to stay in-house.
Key features
- End-to-end encrypted sync across desktop, browser, and mobile
- Unlimited passwords and devices on the free tier
- Passkey storage and TOTP support
- Password generator and vault health reports
- Send feature for transmitting a secret with an expiration
- Self-hosting option for organizations
- Published third-party security audits
System requirements
- Operating system
- Windows 11, Windows 10, and current macOS releases
- Architecture
- x64 on Windows; universal build on macOS
- Connectivity
- Internet connection for sync; the desktop app caches an encrypted local copy
- Browsers
- Extensions for Chrome, Edge, Firefox, and Safari
How to install Bitwarden
1. Create an account
Sign up at bitwarden.com with a strong, unique master password you can remember without storing it anywhere.
2. Install the desktop app
Download from bitwarden.com/download for Windows or macOS.
3. Add the browser extension
Install the extension for your browser and sign in; enable biometric unlock if your device supports it.
4. Turn on two-factor
Enable an authenticator app or hardware key in account settings before importing sensitive credentials.
How to use it
1. Import existing passwords
Use Tools > Import data in the web vault to bring in a CSV export from your browser or previous manager, then delete the CSV securely.
2. Organize with folders
Group entries by purpose — work, finance, personal — so autofill lists stay manageable.
3. Use Send for one-off secrets
Share a credential with an expiration date instead of emailing it.
Safety and privacy
- Install from bitwarden.com/download or an official app store listing.
- The vault is encrypted with a key derived from your master password before it reaches Bitwarden's servers.
- The company publishes third-party audit reports.
- Bundled software
- None.
- Privacy
- Account email and billing data are held by Bitwarden; vault contents are encrypted client-side. Self-hosting removes the vendor from the data path entirely.
Known risks
- A hosted vault means account security depends on your master password and two-factor setup.
- Losing the master password without a recovery method means losing the vault.
What's new
Current release
Bitwarden ships frequent client updates; recent work has centered on passkeys and the redesigned desktop and extension interfaces. Release notes are published per client on the company's site and GitHub.
Pros and cons
Pros
- Free tier covers most personal use
- Open source clients with published audits
- Works across every major platform
- Self-hosting available
Cons
- Vault sync depends on a service you do not control unless you self-host
- Some conveniences are paid-only
- Desktop app is heavier than a local KDBX manager
Verdict
Bitwarden is the practical default for people who want a password manager that just syncs everywhere. Choose KeePassXC instead if you would rather no server ever held your vault.
Frequently asked questions
Is the free Bitwarden plan really unlimited?
Yes for passwords and devices. Paid plans add extras such as file attachments, emergency access, and advanced two-factor methods.
Can Bitwarden read my passwords?
No. Encryption happens on your device using a key derived from your master password before anything is uploaded.