Bitwarden review 2026: open source, EU region, price

Bitwarden is the password manager we would suggest first to readers who care about transparency and cost. It is open source, has a free plan with unlimited devices and passkey storage, lets you choose an EU data region or run your own server, and has a visible record of independent audits. The interface is more functional than elegant, and some conveniences require the cheap Premium plan. This review is an editorial assessment based on vendor documentation, published audit information and price lists, not a laboratory test. For context, see best password managers.

How we assess it

We use the same criteria as in every comparison on this site: encryption model (zero knowledge), independent audits, passkey support, server location and EU option, recovery, export and switching, price (October 2026) and platforms.

Verdict in short

Recommended for: budget-conscious individuals, families, technical users and teams that want open source or self-hosting. Less suitable for: people who want the most polished interface and the easiest family recovery tools. Alternatives: 1Password for polish and Proton Pass for a Swiss provider with aliases.

Security

Bitwarden encrypts vaults on your device with a key derived from your master password, so the company cannot read your data. The clients and server code are open source, which allows anyone to inspect how the encryption works. The company states that it commissions annual security assessments and publishes the summaries. Public entries include a source-code audit and penetration test by the firm Cure53 in 2022, a network security assessment by Cure53 in 2023, an audit of the core cryptography by the Applied Cryptography Group at ETH Zurich in 2025 and further Cure53 assessments in 2025. Bitwarden also reports SOC 2 Type 2 and SOC 3 compliance.

Open source does not by itself make software safe, but it makes problems easier to find. The weak point, as with all managers, is the master password: make it long and unique, and add two-factor authentication to the vault.

Features

• Free plan: unlimited logins, unlimited devices, passkey storage, password generator and phishing protection.
• Premium: built-in authenticator (one-time codes), 5 GB encrypted file attachments, emergency access, vault health reports and priority support.
• Passkeys: create, store and use passkeys on browser, mobile and web. See our guide to setting up passkeys.
• Sharing: unlimited sharing with Families, and Send for temporary text and file sharing.
• Platforms: Windows, macOS, Linux, iOS, Android, all major browsers, web vault and a command-line tool.
• Business features: SSO, SCIM, directory sync, event logs and self-hosting on higher tiers.

Recovery, export and switching

Bitwarden cannot reset a forgotten master password, since it has no access to your vault. Your recovery routes are a two-factor recovery code (store it offline), emergency access (a Premium feature that lets a trusted contact request access after a waiting period) and, for businesses, admin account recovery on the Enterprise tier. See our overview of account recovery.

Exports are available as CSV, JSON, encrypted JSON and a ZIP that includes attachments. Only the JSON formats include cards, identities and stored passkeys. Import support covers most competitors. Treat plaintext exports as sensitive and delete them after use.

Prices (October 2026)

Bitwarden bills in US dollars:

Plan	Price	Users
Free	0	1
Premium	19.80 USD per year (about 1.65 USD per month)	1
Families	47.88 USD per year (about 3.99 USD per month)	Up to 6
Teams	4 USD per user and month	Unlimited
Enterprise	6 USD per user and month	Unlimited

Check Bitwarden’s pricing page for current figures, taxes and conversion to euros. For other cheap options, read best free password managers.

Privacy and data location

Bitwarden is a US company. You can choose between a US and an EU cloud region, and you can host the server yourself with the official setup. According to Bitwarden’s documentation, the regions are separate. If data residency is a requirement, select the EU region at sign-up or migrate your vault later. Because vault contents are end-to-end encrypted, the provider cannot read them in either region. Details are in our overview of European password managers.

Strengths and weaknesses

Strengths: open-source code, the lowest price among the major paid managers, a free plan that does not limit devices or passkeys, an EU region and a self-hosting option, and a public audit trail. Teams can start cheaply and add SSO and provisioning later.

Weaknesses: the interface is plainer than 1Password’s and can feel technical to newcomers, autofill occasionally needs manual help on some sites, billing is in US dollars, and key convenience features such as the built-in authenticator sit behind Premium. There is no vendor reset for a forgotten master password, which is secure but unforgiving.

Getting started in practice

Create an account in the region you prefer, then choose a long master password that you do not use anywhere else. Turn on two-factor authentication for the vault straight away and store the recovery code offline. Install the browser extension and the mobile app, import your passwords from your browser or previous manager using the import tool, and delete the plaintext file afterwards. If you want the built-in authenticator and emergency access, add Premium for about 20 USD per year, and invite a trusted contact. Our guide to setting up passkeys explains the next step once your passwords are in order.

Who should skip it

If you want the smoothest autofill and the most guided family recovery, 1Password is easier. If you prefer to deal with a smaller, privacy-focused suite that includes email aliases, Proton Pass may feel more cohesive. Anyone who dislikes managing their own recovery code and emergency contacts should plan the set-up carefully, because Bitwarden cannot reset a master password.

Alternatives

• 1Password: more polish and a Secret Key, higher price, no free plan. See Bitwarden vs 1Password.
• Proton Pass: Swiss provider, aliases, free plan.
• KeePassXC: local and free, with no cloud service.

Conclusion

Bitwarden delivers excellent value: open source, a transparent audit record, EU hosting and a very low price. If you can live with a plainer interface, it is the best default for individuals and small teams. Start free, move to Premium if you need the authenticator and emergency access, and put recovery in place before something goes wrong.