Bitwarden
An open-source password manager you can actually self-host — end-to-end encrypted, audited, and built for teams.
Bitwarden
Bitwarden is an open-source credential vault with native clients for every platform, browser extensions, CLI tooling and a server you can run yourself. Vaults are end-to-end encrypted on the client; the server never sees your plaintext. It has been independently audited multiple times by firms like Cure53 and Insight Risk Consulting.
A password manager only works if your team actually uses it. Bitwarden ships polished clients for macOS, Windows, Linux, iOS, Android and every major browser — so the path of least resistance is the secure one. We host the server in Europe, keep the audit log healthy and help you roll out shared collections and SSO without the per-seat tax of proprietary vaults.
Capabilities
End-to-end encrypted vaults
AES-256 + PBKDF2/Argon2 on the client. The server stores ciphertext only — even a stolen database is useless without your master password.
Shared team collections
Organise credentials by team, project or customer. Grant access by role, revoke instantly, and see who touched what in the audit log.
MFA, passkeys and SSO
TOTP, WebAuthn/passkeys, hardware keys and SAML/OIDC SSO — bring your existing identity provider and enforce strong authentication everywhere.
Clients everywhere
Desktop, mobile, browser extensions and a scriptable CLI — so engineers, ops and non-technical teammates all get a tool that fits their workflow.
Why this beats the proprietary default
The same advantages apply across every product on this page — open source is a category-level upgrade, not a niche preference.
Auditable source code
Anyone can read, review and audit the code. Security researchers, your own engineers, or an independent auditor — no black boxes, no "trust us".
Your data, your infrastructure
Runs on hardware you control, in a jurisdiction you choose. No silent data exports to a US hyperscaler, no "product improvement" sampling of your content.
Predictable cost, no per-seat tax
Pay for hosting and operations, not for every user, mailbox or feature flag. Adding the tenth or hundredth user doesn't multiply your bill.
Exit is built in
Open standards, open formats, no vendor lock-in. If you ever want to move — to another host, another team, in-house — the data and the software are yours to take.
Want to run Bitwarden on your terms?
We host, monitor, patch and back up the whole stack on European infrastructure — so you get the open-source upside without the operations cost.