Tutorial · Windows 11 · 10 minutes

How to install Bitwarden on Windows 11 — complete setup

Hands typing on keyboard close-up — Bitwarden installation walkthrough for Windows 11 with Windows Hello biometric unlock

This is a step-by-step Windows 11-specific install guide. By the end, you'll have Bitwarden running with Windows Hello unlock, a browser extension paired for biometric autofill, and the desktop app set up as a backup vault viewer. Total time: 10 minutes if focused.

Prerequisites

Step 1: Download the installer

Click the link below to download the latest Bitwarden Windows installer. Our redirect handler resolves the latest signed release from GitHub:

Download Bitwarden for Windows →

The browser saves Bitwarden-Installer-X.X.X.exe (~120 MB) to your Downloads folder. Filename includes the version number.

What you get: a single signed Windows executable. The publisher is "Bitwarden Inc." (verify in step 3). The installer wraps an Electron-based desktop app — same code that runs on macOS and Linux, packaged for Windows.

Step 2: Verify the SmartScreen prompt

Right-click the downloaded file → Properties → Digital Signatures. Confirm:

Or just double-click to run; Windows User Account Control (UAC) prompts. The publisher line should say Bitwarden Inc. If it says anything else (especially "Unknown publisher"), do not proceed — you've downloaded from a phishing source. Cancel, redo step 1.

SmartScreen rarely warns about Bitwarden's installer because the signing certificate is well established. If you see a SmartScreen blue screen ("Windows protected your PC"):

  1. Click More info.
  2. Verify publisher: Bitwarden Inc.
  3. If verified, click Run anyway.
  4. If publisher is wrong — cancel and re-download.

Step 3: Run the installer

The installer launches with Bitwarden branding:

  1. Choose install scope: "Just for me" or "Anyone using this PC". For personal Windows, "Just for me" is fine — installs to %LocalAppData%\Programs\Bitwarden\, no admin elevation required.
  2. Choose installation folder: default is fine. Custom path supported via /D= CLI flag for silent install.
  3. Click Install. Wait ~30 seconds for the install to complete.
  4. Click Finish. Bitwarden launches automatically.

Step 4: Sign in or create an account

Bitwarden's start screen has two paths:

Existing account

  1. Click Log in.
  2. Email address: enter your Bitwarden email.
  3. Server URL: leave as bitwarden.com unless you self-host.
  4. Click Continue.
  5. Master password: enter, click Log in.
  6. If 2FA is enabled on the account, enter the second factor.
  7. Vault loads.

New account

  1. Click Create account.
  2. Email, name, master password, master password hint.
  3. Pick a strong master — 14+ characters, ideally a passphrase. Detailed master password guidance.
  4. Verify email.
  5. Empty vault appears.

Step 5: Enable Windows Hello unlock

Typing the master password every time the vault locks is annoying. Windows Hello biometric unlock fixes this — fingerprint, face, or PIN unlocks the vault instead.

  1. In Bitwarden desktop app: click your avatar (top-right) → Account Security.
  2. Find Unlock with biometrics (or "Unlock with Windows Hello").
  3. Enable the toggle.
  4. Windows prompts for Hello credential (fingerprint scan, face scan, or PIN entry) to confirm setup.
  5. Lock the vault (File → Lock or Ctrl+L).
  6. To unlock — Bitwarden now prompts for Windows Hello instead of master password.

Master password is still required after a full Windows reboot — biometric is a convenience, not a replacement. This prevents an attacker with physical access from logging in with just your fingerprint.

Step 6: Install the browser extension

The desktop app is a vault viewer. The browser extension is what does autofill on websites — the actual reason for using a password manager. Install for whichever browser you use:

After install:

  1. Pin the Bitwarden icon to the toolbar.
  2. Click the icon → Log in.
  3. Use the same email and master password as the desktop app.
  4. Vault syncs automatically — same items as desktop.

Step 7: Pair browser with desktop for Windows Hello unlock

Now make the extension also use Windows Hello (without typing master password every browser-restart):

  1. In the desktop app: Settings → Allow browser integration → enabled. Restart the app.
  2. In the browser extension: click the gear icon → Account Security → Unlock with biometrics → enabled.
  3. Browser prompts you to approve the pairing — accept in the desktop app dialog.
  4. Extension is now unlocked with Windows Hello (relayed through desktop app).

Caveat: the desktop app must be running for browser-extension biometric unlock to work. If you close the desktop app, the extension falls back to master password.

Step 8: Windows 11-specific tips

Pin to taskbar

Right-click Bitwarden in Start menu → "Pin to taskbar". One-click access to the desktop vault viewer.

Use Snap Layouts

Hover Bitwarden's maximise button to invoke Snap Layouts (Win+Z). Useful for placing the vault viewer alongside your browser in a side-by-side layout.

Notifications

Bitwarden uses Windows 11 notification centre for sync events and 2FA pushes. Configure: Settings → Notifications → Bitwarden → choose detail level.

Auto-launch on startup

Settings → Application → Start Bitwarden when computer starts (with Windows Hello unlock, this is convenient — vault always available).

Microsoft Store version alternative

If you prefer Windows-managed updates: install the Microsoft Store version instead. Behaviour is functionally identical to the .exe; updates flow through Windows Update rather than the in-app updater. Microsoft Store link.

Step 9: Common problems

Windows Hello unlock doesn't work in browser extension

Installer "publisher unknown" warning

You downloaded from a phishing source. Cancel, re-download via our redirect which always lands on the official GitHub release.

Vault locks unexpectedly

Vault timeout default is 15 minutes idle. Settings → Account Security → Vault Timeout → adjust. Options: never, 1m, 5m, 15m, 30m, 1h, 4h, on system lock, on browser restart.

Autofill doesn't work on a specific site

Edit the vault item: URI 1 → Match Detection → try "Host" or "Starts With". Default is "Domain" which fails on weird URL structures.

Update prompt loop

Rare. If the in-app updater can't complete, manually re-download the latest installer from our redirect and run it; new install replaces old without losing vault data.

What's next