Every link below routes through our redirect to the official Bitwarden release on GitHub or the platform store. We never modify the installer.
Bitwarden for Windows 10 and 11 — full desktop app, Microsoft Store, or portable build.
Bitwarden for macOS — Universal app for Apple Silicon and Intel Macs, or Mac App Store.
Bitwarden for Linux — pick the package format that matches your distribution.
Bitwarden extension for Chrome, Brave, Vivaldi, Arc, and any Chromium-based browser.
Bitwarden add-on from Mozilla Add-ons — Mozilla-recommended, full WebExtensions API.
Bitwarden add-on from the Edge Add-ons store — natively integrated with Microsoft Edge.
Bitwarden Safari extension is bundled with the macOS app — install via Mac App Store.
Bitwarden has been audited by Cure53 (2018, 2020) and is published as open source on GitHub. Read the security analysis → · Our review → · Pricing →
Most password managers are closed-source SaaS products you have to trust. Bitwarden's source code is published, the cipher choices are documented, and any sufficiently motivated person can self-host the entire stack.
Unlimited passwords across two devices, web vault, basic 2FA — no item count, no nag screens, no trial expiry. Premium ($10/year) adds TOTP, attachments and emergency access; the free tier is not crippled to upsell it.
Every client (desktop, mobile, browser, CLI) and the server itself live on github.com/bitwarden. The encryption code is public, audited (Cure53, 2018 and 2020) and forkable. Vaultwarden is the well-known community fork.
Officially supported. Docker compose pulls the entire stack — vault, identity, admin portal, database — onto your server. The "lite" install fits on a single $5/month VPS for personal use.
Vault data is encrypted client-side before it ever leaves the device. PBKDF2 (and Argon2id since 2023) with high iteration counts derives the master key. Bitwarden's servers see ciphertext only — the same way Signal works for messages.
No analytics SDK in the desktop app, no third-party trackers, no "anonymous usage data" toggle that's actually on. Compare to LastPass, which had seven trackers in its Android client when reviewed by Exodus Privacy.
Free tier syncs between two devices. There's no equivalent of 1Password's "personal subscription required for sync" or LastPass's mobile-or-desktop forced choice. Premium lifts the device count to unlimited for $10/year.
Our Windows page covers all three install paths — full desktop app, Microsoft Store, or portable build that runs from a USB stick. Pick whichever matches how you manage software.
If you're shopping between password managers — particularly after the LastPass breach pushed many users to look around — here's how Bitwarden stacks up against the four most asked-about alternatives.
Three short reads cover the typical first-time path: install on your platform, set up the vault, and add two-factor protection.
Yes — the free tier is unconditional, unlimited passwords across two devices, with no trial timer or nag screens. Premium at $10/year adds TOTP authenticator, file attachments up to 1 GB, advanced 2FA (FIDO2/YubiKey), emergency access and vault health reports. The free tier on its own is competitive with paid offerings from other vendors.
Three legitimate sources: (1) the official .exe installer on GitHub Releases, (2) the Microsoft Store UWP build, (3) a portable .exe that runs without install. We redirect to all three from our Windows page. The button above on this homepage points to option 1.
Open source vs closed source; never breached vs breached in 2022; free tier on two devices vs free on one device only; self-hosting officially supported vs not supported. The technical differences are detailed in our Bitwarden vs LastPass comparison; the migration guide walks through the actual export/import.
Yes. Docker compose pulls the full stack onto your server. The "lite" install (single container) fits on a $5/month VPS for personal use; the full enterprise install with separate identity and admin portals fits on any modern Linux box. We have a walkthrough with the actual commands.
The encryption is publicly documented (AES-256-CBC for vault data, PBKDF2-SHA256 or Argon2id for the master key derivation) and audited externally — Cure53 in 2018 and again in 2020. The bug bounty is active on HackerOne. There has never been a public breach of the cloud service. See our security overview for the technical details.
You absolutely can — bitwarden.com is the canonical source. We exist for two cases: (1) you searched "download bitwarden windows" and want to verify you're looking at the official release without first navigating their marketing site, and (2) you want comparisons, migration guides and a curated tutorial in one place. Every download button here routes to the same official artifacts you'd get from bitwarden.com.
No. Bitwarden does not run an affiliate program. We make zero dollars per Bitwarden installation. This page exists because the editorial coverage of password managers is genuinely useful and we run display ads to fund it. Comparison pages do link out to alternatives that do run affiliate programs, and those links are disclosed.
Vaultwarden is an unofficial Rust reimplementation of the Bitwarden server, designed for self-hosting on low-powered hardware. It speaks the same API as the official server, so all official Bitwarden clients work against it. Bitwarden, Inc. tolerates it; many self-hosters prefer it for the lower memory footprint. Source: github.com/dani-garcia/vaultwarden.
