Tutorial · Beginner-friendly · ~20 minutes

Bitwarden tutorial: from zero to daily use

This is a complete setup walkthrough for a new Bitwarden user. By the end, you'll have an account, browser extension, mobile app, two-factor auth, and your old passwords imported — all working together. Total time: 15-20 minutes if you're focused, longer if you stop to explore each feature.

Step 1 — Create your Bitwarden account

Open vault.bitwarden.com in your browser. The sign-up page asks for four things:

• Email address. Use a real, accessible email — Bitwarden will send a verification link.
• Name. Optional but recommended (used in shared org contexts).
• Master password. The one password you'll need to remember. We'll cover this in detail next.
• Master password hint. Optional reminder text. Don't put your actual password here, obviously.

Click Create Account. Verify the email. You're in — the empty web vault appears.

Step 2 — Pick a strong master password

This is the most important decision in your password manager setup. Master password unlocks everything; if it's weak, the whole vault is weak. Some rules:

• Length over complexity. A 5-word random passphrase ("correct horse battery staple jaguar") beats a 10-character random string ("Tr0ub@d0r3") on entropy and is easier to remember.
• Random selection. Don't pick words that mean anything personal. Use EFF's diceware or Bitwarden's own password generator.
• Don't reuse. Master password must be unique to Bitwarden. If it's the same as your email password, an email breach gives away the vault.
• Don't store it digitally. Memorise it. If you must write it, paper in a physical safe is the only acceptable medium.
• Length minimum: 14 characters. Each additional character roughly doubles brute-force resistance.

Bad masters: password123, your dog's name, your birthday, anything you've used elsewhere.

Good masters: flesh-circle-trumpet-ocean-disrupt (random words), Tr8m9q!Hx2nF7vK4yL3pZ (random string, harder to remember).

Step 3 — Install the browser extension

The extension is what does autofill — the actual reason you're using a password manager. Install for whichever browser you use:

• Chrome / Brave / Arc / Vivaldi — Chrome Web Store
• Firefox — Mozilla Add-ons
• Edge — Microsoft Edge Add-ons
• Safari — bundled with Bitwarden Mac app

After install:

1. Pin the Bitwarden icon to the toolbar (puzzle-piece icon → pushpin next to Bitwarden).
2. Click the icon → Log in.
3. Enter your email + master password.
4. The extension shows your vault (currently empty).

Step 4 — Import existing passwords

If you're migrating from another password manager or your browser's built-in storage, import:

From Chrome / Edge / Firefox built-in

1. Open the browser's password settings (chrome://password-manager/passwords in Chrome).
2. Find the export option (varies by browser, usually under settings menu).
3. Save as CSV.
4. In Bitwarden web vault: Tools → Import data → choose source → upload CSV.

From LastPass

See our detailed LastPass migration guide. Quick version: LastPass web vault → Advanced Options → Export. Bitwarden web vault → Tools → Import → LastPass (csv).

From 1Password / Dashlane / KeePass

Bitwarden's importer supports 50+ source formats — the import dropdown lists them all. Export from your old manager, upload to Bitwarden. Standard logins (username + password + URL) migrate cleanly; secure notes mostly; attachments and TOTP codes need manual re-add.

What about new sign-ups?

For sites where you don't have an existing password yet — let Bitwarden generate one when you sign up. The extension's right-click menu has "Generate Password" inline.

Step 5 — Install the mobile app

Mobile autofill is the second pillar of password manager use — credentials filled automatically on your phone in any app or browser.

• iOS — App Store
• Android — Google Play (or F-Droid for de-Googled phones)

After install, log in with the same email + master password you used for the web account. Your vault syncs to the device automatically.

Set up biometric unlock immediately — Settings → Account Security → Unlock with biometrics. Now Face ID / Touch ID / fingerprint unlocks the vault instead of typing the master.

Step 6 — Set up OS-level autofill

This is the step new users miss. Without OS-level autofill, the mobile app is just a vault viewer — you'd have to copy-paste passwords manually. Configure:

iOS

1. Settings → General → AutoFill & Passwords.
2. Tap AutoFill Passwords → enable.
3. Tick Bitwarden; optionally untick iCloud Keychain.

Android

1. Settings → System → Languages & input → Autofill service.
2. Select Bitwarden.
3. In Bitwarden settings: enable Auto-fill Service and Inline Autofill.

Test: open any app login screen. Bitwarden should appear in the keyboard accessory bar with matching credentials.

Step 7 — Add two-factor authentication

2FA on the master account is what stops attackers who steal your master password. With 2FA, master password alone is not enough — they also need the second factor (TOTP code, hardware key, etc.).

Easiest: TOTP via authenticator app

1. Install Google Authenticator, Authy, or Aegis on your phone.
2. Bitwarden web vault → Settings → Security → Two-step Login.
3. Click Enable next to "Authenticator App".
4. Scan the QR code with your authenticator app.
5. Enter the 6-digit code shown to confirm.
6. Save the recovery code shown next — write it down on paper, keep in a safe.

Now every login on a new device requires master password + 6-digit code from your authenticator.

Stronger: FIDO2 / hardware security key (Premium)

If you have a YubiKey or other FIDO2 key, Premium ($10/year) unlocks hardware-key 2FA. This is phishing-resistant — even a perfect phishing site can't trick the key into authorising.

Step 8 — What daily use looks like

Once everything is set up, your day looks like this:

1. Open browser. Bitwarden extension is locked. Click → unlock with master password (or biometric if enabled).
2. Visit any site with a saved login. Bitwarden offers to autofill in the username/password fields.
3. Sign up for a new service. Bitwarden generates a strong password inline; saves the new credential automatically after submit.
4. Open an app on your phone. Login screen shows Bitwarden suggestion in keyboard. Tap to autofill.
5. The extension auto-locks after a configurable timeout (default 15 minutes idle). Re-unlock as needed.

That's it. The vault becomes invisible infrastructure — you stop thinking about passwords.

Step 9 — Advanced tips

Custom URI matching per item

If autofill doesn't work on a site, edit the vault item: URI 1 → Match Detection → try "Host" or "Starts With" or "Regular Expression". Bitwarden's default is "Domain" which works most of the time but fails on weird URL structures.

Folders and collections

Folders organise your personal vault. Collections are for shared organisation vaults. Either is optional — for personal use, Bitwarden's search is fast enough that folders are organisational nicety, not necessity.

Send (encrypted text/file sharing)

Bitwarden Send is one-time-use encrypted sharing — text or file. Useful for: emailing a temporary password to a colleague, sharing a sensitive document without leaving it in chat history. Set expiry, max access count.

Vault health (Premium)

Premium adds Vault Health Reports — list of compromised passwords (cross-reference HaveIBeenPwned), list of weak passwords, list of reused passwords, list of inactive 2FA. Useful periodic cleanup; not essential.

Vault export for backup

Tools → Export Vault → encrypted .json (recommended over plaintext). Save somewhere safe. Restore via Import. Backup quarterly is a good cadence.

Self-hosting

If you want to take this further: self-host the entire Bitwarden server on your own VPS. ~$5/month, your vault data never touches Bitwarden's cloud. Walkthrough on the linked page.