Windows · Privacy & Encryption

Bitwarden for Windows

Open-source password manager with end-to-end encrypted cloud sync, a genuinely usable free tier, and optional self-hosting.

Updated July 15, 2026 · Reviewed by SoftNexi Safety Desk, Download sourcing and safety review

Overview

Bitwarden is the hosted counterpart to a local manager like KeePassXC. Your vault syncs across devices through Bitwarden's servers, encrypted end to end so the service cannot read it.

The free tier is unusually complete: unlimited passwords, unlimited devices, and password sharing with one other person. Paid tiers add features such as file attachments, emergency access, and advanced two-factor options.

Because the clients and server are open source, organizations can also self-host, which is a meaningful option if policy requires data to stay in-house.

Key features

  • End-to-end encrypted sync across desktop, browser, and mobile
  • Unlimited passwords and devices on the free tier
  • Passkey storage and TOTP support
  • Password generator and vault health reports
  • Send feature for transmitting a secret with an expiration
  • Self-hosting option for organizations
  • Published third-party security audits

System requirements

Operating system
Windows 11, Windows 10, and current macOS releases
Architecture
x64 on Windows; universal build on macOS
Connectivity
Internet connection for sync; the desktop app caches an encrypted local copy
Browsers
Extensions for Chrome, Edge, Firefox, and Safari

How to install Bitwarden

  1. 1. Create an account

    Sign up at bitwarden.com with a strong, unique master password you can remember without storing it anywhere.

  2. 2. Install the desktop app

    Download from bitwarden.com/download for Windows or macOS.

  3. 3. Add the browser extension

    Install the extension for your browser and sign in; enable biometric unlock if your device supports it.

  4. 4. Turn on two-factor

    Enable an authenticator app or hardware key in account settings before importing sensitive credentials.

How to use it

  1. 1. Import existing passwords

    Use Tools > Import data in the web vault to bring in a CSV export from your browser or previous manager, then delete the CSV securely.

  2. 2. Organize with folders

    Group entries by purpose — work, finance, personal — so autofill lists stay manageable.

  3. 3. Use Send for one-off secrets

    Share a credential with an expiration date instead of emailing it.

Safety and privacy

  • Install from bitwarden.com/download or an official app store listing.
  • The vault is encrypted with a key derived from your master password before it reaches Bitwarden's servers.
  • The company publishes third-party audit reports.
Bundled software
None.
Privacy
Account email and billing data are held by Bitwarden; vault contents are encrypted client-side. Self-hosting removes the vendor from the data path entirely.

Known risks

  • A hosted vault means account security depends on your master password and two-factor setup.
  • Losing the master password without a recovery method means losing the vault.

What's new

  • Current release

    Bitwarden ships frequent client updates; recent work has centered on passkeys and the redesigned desktop and extension interfaces. Release notes are published per client on the company's site and GitHub.

Pros and cons

Pros

  • Free tier covers most personal use
  • Open source clients with published audits
  • Works across every major platform
  • Self-hosting available

Cons

  • Vault sync depends on a service you do not control unless you self-host
  • Some conveniences are paid-only
  • Desktop app is heavier than a local KDBX manager

Verdict

Bitwarden is the practical default for people who want a password manager that just syncs everywhere. Choose KeePassXC instead if you would rather no server ever held your vault.

Frequently asked questions

Is the free Bitwarden plan really unlimited?

Yes for passwords and devices. Paid plans add extras such as file attachments, emergency access, and advanced two-factor methods.

Can Bitwarden read my passwords?

No. Encryption happens on your device using a key derived from your master password before anything is uploaded.