Bitwarden is an American cybersecurity company specializing in the protection of digital credentials. Its password manager lets users generate, store and share passwords in an encrypted vault, accessible from a browser, computer or mobile device. Available at bitwarden.com, its offering combines a free version, individual and family subscriptions, and business plans. It addresses a common problem: limiting password reuse without making everyday use more complicated.
Origins rooted in open source
Launched in 2016 by developer Kyle Spearr, Bitwarden was built around a principle of transparency: making its code available for review. This choice allows researchers, developers and customers to study how the software works. It is accompanied by external security audits, although open-source code alone does not guarantee the absence of vulnerabilities.
Initially adopted by individual users, the service has gradually expanded its features for teams and large organizations. Its business model relies on converting users to paid plans, particularly for sharing, administration and support capabilities. The company thus maintains a free entry point while developing revenue tied to business needs.
From passwords to application secrets
The password manager remains the core of the business. Its architecture relies on end-to-end encryption of the vault and a so-called “zero-knowledge” model: the service is not supposed to be able to read its users’ encrypted data. This protection also depends on the security of devices and account access mechanisms.
For businesses, Bitwarden offers shared vaults, security policies, event logs and integrations with authentication systems, among other features. The service can be used in the provider’s cloud or deployed in a self-hosted environment. The latter option provides greater control over the infrastructure, but requires taking responsibility for its operation and updates.
With Secrets Manager, Bitwarden also serves development and operations teams that handle API keys, tokens and other application secrets. Its acquisition of Passwordless.dev in 2023 strengthened its position in passwordless authentication. Its password manager also supports passkeys for compatible services.
What next?
The transition to passkeys is expected to change the role of password managers rather than immediately eliminate their usefulness. Bitwarden will need to support the coexistence of several authentication methods while maintaining ease of use. In the face of features built into browsers and operating systems, its differentiation rests in particular on its cross-platform availability, deployment options and administration tools. For the company, the challenge will be to continue this expansion without making its offering less clear or eroding trust in the protection of its vaults.