Bitwarden Password Manager Review

Posted on by

Bitwarden is a secure open source solution for storing all your passwords that offers a wide range of features in addition to an affordable price. It offers strong encryption, password auditing, breach monitoring and two-factor authentication. The password manager stores all your credentials in an encrypted vault protected by a master password.

Although Bitwarden follows a zero-knowledge encryption architecture and offers some good features, it lacks in some areas. The autofill feature is very inconvenient and insecure to use, and the service stores data in countries that are part of a surveillance consortium. In addition, it has been compromised before, raising security concerns.

The password manager market includes more user-friendly and privacy and security-oriented alternatives that you can try, such as NordPass.

However, can Bitwarden be an effective alternative to some of the best password managers out there?

Keep reading to learn all about this service. In this Bitwarden review, we will provide you with a first-hand experience review of Bitwarden features, security, usability, pricing and more.

Pros and Cons of Bitwarden

Things we like
AES-256 encryption
Zero knowledge infrastructure
Password Generator
Encrypted File Messenger
Limited free version
Can be self-hosted
Good compatibility
Very inexpensive, starting at $0.83 per month

Things we don’t like
Desktop app has very few features
Data is stored in countries that are part of the Five Eyes Alliance
Autofill is not secure and doesn’t always work seamlessly
Premium users only have 1GB of encrypted storage
No automatic backups

Bitwarden Overview
Bitwarden is a fairly simple but secure open source password management tool that lets you generate, synchronize, manage, merge and share all your passwords. It implements strong AES-256 encryption, 2FA, zero-knowledge architecture, and its security is regularly audited by third-party companies and researchers.

You can also expect different cloud-hosted or self-hosted plans, affordable subscriptions, and even the option to have a free account with unlimited passwords and devices.

Is Bitwarden secure?
Bitwarden is a secure service that uses 256-bit AES encryption to protect your data. It is the same cipher used by government organizations and banks to ensure the highest standards of security.Bitwarden also guarantees security with its two-factor authentication diversity and zero-knowledge architecture.

Here’s a more in-depth look at all the features Bitwarden offers in terms of security and privacy:

Encryption.Bitwarden uses advanced AES-256 encryption ciphers, known for their unbreakable security. Not to mention it implements a zero-knowledge architecture, which means you’re the only person with access to your passwords.
Audit.Bitwarden passed a thorough third-party security audit by Cure53 in November 2018 and listed the actions they would take to address the vulnerabilities. The service also completed a security assessment and penetration test by the audit firm Insight Risk Consulting, which found no significant security issues.
Multiple Authentication. The password manager comes with multiple authentication methods. The traditional and most commonly used include email and authentication applications. Advanced users can also use YubiKey, FIDO2 or Duo.
Biometric authentication. You can use Face ID or Touch ID to quickly log in to the Bitwarden vault without having to enter your master password each time.
While Bitwarden offers a number of security measures, it lacks automatic backups, and its autofill feature is not secure and can be exploited. Also, as stated in its terms of service, Bitwarden is located in the United States and is part of the 14 Eyes Intelligence Alliance.

Has Bitwarden been hacked?
No, there have been no Bitwarden security breaches or hacks. However, it is worth noting that a research report published by FlashPoint in March 2023 found that Bitwarden’s autofill feature shows dangerous behavior. This could lead to malicious iframes stealing user credentials, even when they are embedded in legitimate sites.

Of course, there’s always the possibility of launching a social engineering attack via malware or installing a keylogger on your computer – no system is completely immune to human error. However, if a hacker tries to find out your master password (if you have 2FA enabled), he will also need your 2FA code.

In short, if you don’t use autofill, there are too many hurdles an attacker must jump through to successfully attack your vault. As long as your Master Password is unique and strong enough, you can rest assured that it will fall into the wrong hands.

Bitwarden Security Features
Bitwarden utilizes a robust security architecture to protect your sensitive data. Its multi-layered approach includes encryption used by banks and government agencies around the world, two-factor authentication, and regular security audits to ensure your passwords are impenetrable. These audits demonstrate Bitwarden’s commitment to maintaining the highest standards of security.

In addition, Bitwarden has implemented a zero-knowledge architecture. This means that Bitwarden’s servers do not store your master password or any unencrypted data in your vault.